Extract artifacts from password protected file

[khanchand]

Hi,

Can we extract indicators from a password protected file (pdf, csv) ?

Thanks

[ranjeet · Accepted solution]

Hi @khanchand ,

To extract IOCs from password-protected PDF file, you can use the "PDF Reader" connector. This connector extracts all text from the PDF file. To extract text from a password-protected PDF file, you'll need to provide both the file IRI and the password for the PDF in connector step. After executing this connector step, you'll receive the PDF content in text format. To extract IOCs from this text, you can use the "Extract artifacts from string" action in the Utilities integration.

Note: This functionality is only available for PDF files.

Please refer to the attached images for more details.