OpenIOC 1.1 Editor

The FireEye OpenIOC 1.1 Editor is a free tool that provides an interface for managing data and manipulating the logical structures of v1.1 OpenIOCs. IOCs are XML documents that help incident responders capture diverse information about threats, including attributes of malicious files, characteristics of registry changes and artifacts in memory. The IOC Editor includes:

• Manipulation of the logical structures that define the IOC
• Application of meta-information to IOCs, including detailed descriptions or arbitrary labels
• Conversion of IOCs into XPath filters
• Management of lists of “terms” used within IOCs

NOTE ON APP VERSIONS: We have two versions of OpenIOC Editor available on the FireEye Market. This version, 3.2 is the OpenIOC 1.1 editor. This is the current version of OpenIOC, used in our Endpoint Security (formerly known as HX) product. The previous version, 2.2 is the OpenIOC 1.0 editor, available here. It is the legacy version of OpenIOC, but it is still used in some tools.