Security Operations Center

Security Analysis Portal

Quick-access utility suite for artifact triage, artifact scanning, and link decoding.

DocScan

Standalone OLE/OOXML parser to unpack Word, Excel, RTF, and PDF artifacts for hidden VBA macros and embedded relationship URLs.

docscan.socdoc.dev/doc-scan →

URL Decoder

Unmangles and extracts true destinations from Microsoft SafeLinks and Proofpoint URL Defense wrappers with automatic defanging.

decoder.socdoc.dev →

Defanger

Bidirectional IOC sanitization tool to safely neutralize and restore hostile URLs, domains, and IP addresses.

defang.socdoc.dev →

URL Analyzer

Recursively traces multi-stage redirection chains, decodes Base64 query targets, and sanitizes tracking telemetry.

urlscan.socdoc.dev →

IP Intelligence

Authoritative RDAP and BGP ASN triage tool for network allocations, route origins, and registry lookups.

ip.socdoc.dev →

Script Unpacker

Deobfuscates PowerShell -enc, recursive Base64, Hex streams, and reversed strings entirely in-browser.

unpacker.socdoc.dev →

OSINT Directory

Curated catalog of free distributions, online sandboxes, threat feeds, and analysis utilities.

tools.socdoc.dev →