RansomWatchToMDEIoC

Parse Ransomwatch results in python and create MDE IOC lists as you search.

https://ransomwatch.telemetry.ltd/

Required Libraries for validating domains:

pip install validators
pip install tldextract

Example Usage

How to Bulk Import IOCs

See also MDE IOC/TenantAllowBockList Repos for

DNSTwist: https://github.com/jkerai1/DNSTwistToMDEIOC
JoeSandBox: https://github.com/jkerai1/JoeSandBoxToMDEBlockList
TLD: https://github.com/jkerai1/TLD-TABL-Block

Map

Ransomwatch Repo

https://github.com/joshhighet/ransomwatch