Automatically harvest IOCs from Malware-Traffic-Analysis.net
Build a scheduled workflow that fetches the Malware Traffic Analysis RSS feed and identifies new articles since the last run. Extract links, detect IOC-bearing archives, then download, unzip, and parse the IOCs (hashes, IPs, domains, URLs). Deduplicate against previously ingested indicators and hand them to a downstream story or threat-intel platform. Handle download/unzip failures, password-protected archives, and malformed content. Output the newly extracted IOCs.
What this prompt builds
Pull new Malware Traffic Analysis posts, extract IOCs from linked archives, and feed your intel platform.
The problem
Valuable, fresh IOCs are published on Malware-Traffic-Analysis.net but trapped in blog posts and zip files no one has time to mine daily. The intel goes unused.
Solution and impact
This workflow reads the MTA RSS feed, deduplicates new articles, follows IOC links, and downloads, unzips, and extracts the indicators for use elsewhere. A rich, free intel source becomes an automated feed into your threat platform.