--- title: ThreatLens: Automating IoC Detection Directly in Your... description: ThreatLens is an open-source Chrome extension built by a SOC analyst to automate Indicator of Compromise (IoC) detection directly in the browser. It uses regex... canonical: https://daily.dev/posts/threatlens-automating-ioc-detection-directly-in-your-browser-iqigp70dx twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: ThreatLens: Automating IoC Detection Directly in Your Browser | daily.dev og:description: ThreatLens is an open-source Chrome extension built by a SOC analyst to automate Indicator of Compromise (IoC) detection directly in the browser. It uses regex... og:url: https://daily.dev/posts/threatlens-automating-ioc-detection-directly-in-your-browser-iqigp70dx og:image: https://api.daily.dev/og/posts/IqigP70dX.png og:image:alt: ThreatLens: Automating IoC Detection Directly in Your Browser og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # ThreatLens: Automating IoC Detection Directly in Your Browser **[InfoSec Write-ups](https://daily.dev/sources/infosecwriteups)** · 4 min read · 0 upvotes · 0 comments ## Summary ThreatLens is an open-source Chrome extension built by a SOC analyst to automate Indicator of Compromise (IoC) detection directly in the browser. It uses regex and DOM scanning via TreeWalker to identify IPv4, IPv6, domains, and URLs on any webpage, injecting subtle badge icons next to detected indicators. Clicking a badge triggers a reputation lookup via AbuseIPDB, returning abuse confidence scores, ISP, and country data. Features include bulk scanning, de-obfuscation of masked indicators, scope control via allowlist/blocklist, and a privacy-first design with no telemetry. Available on the Chrome Web Store and requires a free AbuseIPDB API key. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [The EDR blind spot: 3 ways browser attacks evade endpoint telemetry](https://daily.dev/posts/the-edr-blind-spot-3-ways-browser-attacks-evade-endpoint-telemetry-v11w3g13y) · BleepingComputer · 0 upvotes · 0 comments - [Google Threat Intelligence in Elastic Security — Elastic Security Labs](https://daily.dev/posts/google-threat-intelligence-in-elastic-security-elastic-security-labs-y7jy3yh81) · Elastic Security Labs · 0 upvotes · 0 comments - [Detecting browser extensions for bot detection, lessons from LinkedIn and Castle](https://daily.dev/posts/detecting-browser-extensions-for-bot-detection-lessons-from-linkedin-and-castle-nu1uxbkhl) · Security Boulevard · 0 upvotes · 0 comments - [Cloudflare Client-Side Security: smarter detection, now open to everyone](https://daily.dev/posts/cloudflare-client-side-security-smarter-detection-now-open-to-everyone-54dlhvq2t) · Cloudflare · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#devtools](https://daily.dev/tags/devtools) [View this post on daily.dev](https://daily.dev/posts/threatlens-automating-ioc-detection-directly-in-your-browser-iqigp70dx) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"ThreatLens: Automating IoC Detection Directly in Your Browser","url":"https://daily.dev/posts/threatlens-automating-ioc-detection-directly-in-your-browser-iqigp70dx","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/threatlens-automating-ioc-detection-directly-in-your-browser-iqigp70dx"},"datePublished":"2026-04-12T08:42:57.136Z","dateModified":"2026-04-12T08:43:19.366Z","description":"ThreatLens is an open-source Chrome extension built by a SOC analyst to automate Indicator of Compromise (IoC) detection directly in the browser. It uses regex...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/e989ef59d677bb93bc8fe2b2e63e760a?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/e989ef59d677bb93bc8fe2b2e63e760a?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"InfoSec Write-ups","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"InfoSec Write-ups","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/f0dc21b5bbfd46fda36f7b4b53dd1705","url":"https://daily.dev/sources/infosecwriteups"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/threatlens-automating-ioc-detection-directly-in-your-browser-iqigp70dx","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,devtools","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"InfoSec Write-ups","item":"https://daily.dev/sources/infosecwriteups"},{"@type":"ListItem","position":3,"name":"ThreatLens: Automating IoC Detection Directly in Your Browser"}]} ```