Actions25
- Crypto Address Actions
- CVE Actions
- Domain Actions
- Email Address Actions
- File Actions
- Hash Actions
- IOC Actions
- IP Address Actions
- MAC Address Actions
- Phone Number Actions
- Quota Actions
- Threat Actor Actions
- URL Actions
IOC → Extract
AI-generatedSummary
Extract indicators from required raw text (up to 1 MB) by sending it to the mlab.sh IOC scan API. Optionally score the text for SMS threats; Deep scoring also unmasks short links and checks IP hosts, and may take longer because it makes network calls.
Inputs
- Text (required) — Raw report, log, email, or SMS text to scan; up to 1 MB.
- Risk Scoring — Choose Off (default), Fast for offline smishing scoring, or Deep for scoring that also unmasks short links and checks IP hosts using network calls.
- Country — Keyword and brand pack for scoring; shown when Fast or Deep scoring is selected. Defaults to fr.
Output shape
A single JSON result per input item containing the IOC scan API response.
The node sends Text in a POST request to /scan/ioc. When risk scoring is enabled, it also sends the selected risk mode and Country. With Continue On Fail enabled, an item-level error is returned as {"error":"..."}.