CINXE.COM
Blog | 3 (+1) Pulsedive Utilities For Every Security Analyst
<!DOCTYPE html> <html lang="en"> <head> <title>Blog | 3 (+1) Pulsedive Utilities For Every Security Analyst</title> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <meta name="HandheldFriendly" content="True" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <link rel="preload" as="style" href="https://blog.pulsedive.com/assets/built/screen.css?v=ee51204866" /> <link rel="preload" as="script" href="https://blog.pulsedive.com/assets/built/casper.js?v=ee51204866" /> <link rel="stylesheet" type="text/css" href="https://blog.pulsedive.com/assets/built/screen.css?v=ee51204866" /> <meta name="description" content="Learn about three built-in shortcuts designed for security analysts to get the data you need, in the form you want - plus a bonus for Pro users."> <link rel="icon" href="https://blog.pulsedive.com/content/images/size/w256h256/2018/09/heart128-1.png" type="image/png"> <link rel="canonical" href="https://blog.pulsedive.com/3-1-pulsedive-utilities-for-every-security-analyst/"> <meta name="referrer" content="no-referrer-when-downgrade"> <link rel="amphtml" href="https://blog.pulsedive.com/3-1-pulsedive-utilities-for-every-security-analyst/amp/"> <meta property="og:site_name" content="Pulsedive Blog"> <meta property="og:type" content="article"> <meta property="og:title" content="Blog | 3 (+1) Pulsedive Utilities For Every Security Analyst"> <meta property="og:description" content="Learn about three built-in shortcuts designed for security analysts to get the data you need, in the form you want - plus a Pro bonus."> <meta property="og:url" content="https://blog.pulsedive.com/3-1-pulsedive-utilities-for-every-security-analyst/"> <meta property="og:image" content="https://blog.pulsedive.com/content/images/size/w1200/2023/04/Pulsedive-Tips-and-Tricks-1.jpg"> <meta property="article:published_time" content="2023-04-25T13:45:25.000Z"> <meta property="article:modified_time" content="2023-04-25T13:45:24.000Z"> <meta property="article:tag" content="pulsedive"> <meta name="twitter:card" content="summary_large_image"> <meta name="twitter:title" content="Blog | 3 (+1) Pulsedive Utilities For Every Security Analyst"> <meta name="twitter:description" content="Learn about three built-in shortcuts designed for security analysts to get the data you need, in the form you want - plus a Pro bonus."> <meta name="twitter:url" content="https://blog.pulsedive.com/3-1-pulsedive-utilities-for-every-security-analyst/"> <meta name="twitter:image" content="https://blog.pulsedive.com/content/images/size/w1200/2023/04/Pulsedive-Tips-and-Tricks-2.jpg"> <meta name="twitter:label1" content="Written by"> <meta name="twitter:data1" content="Grace Chi"> <meta name="twitter:label2" content="Filed under"> <meta name="twitter:data2" content="pulsedive"> <meta name="twitter:site" content="@pulsedive"> <meta name="twitter:creator" content="@euphoricfall"> <meta property="og:image:width" content="1200"> <meta property="og:image:height" content="640"> <script type="application/ld+json"> { "@context": "https://schema.org", "@type": "Article", "publisher": { "@type": "Organization", "name": "Pulsedive Blog", "url": "https://blog.pulsedive.com/", "logo": { "@type": "ImageObject", "url": "https://blog.pulsedive.com/content/images/2022/03/Pulsedive-Logo_Light-Blue.png" } }, "author": { "@type": "Person", "name": "Grace Chi", "image": { "@type": "ImageObject", "url": "https://blog.pulsedive.com/content/images/size/w1200/2021/04/Grace-Chi-close-portrait-crop-.jpg", "width": 1200, "height": 1200 }, "url": "https://blog.pulsedive.com/author/grace/", "sameAs": [ "https://twitter.com/euphoricfall" ] }, "headline": "Blog | 3 (+1) Pulsedive Utilities For Every Security Analyst", "url": "https://blog.pulsedive.com/3-1-pulsedive-utilities-for-every-security-analyst/", "datePublished": "2023-04-25T13:45:25.000Z", "dateModified": "2023-04-25T13:45:24.000Z", "image": { "@type": "ImageObject", "url": "https://blog.pulsedive.com/content/images/size/w1200/2023/04/Pulsedive-Tips-and-Tricks-1.jpg", "width": 1200, "height": 640 }, "keywords": "pulsedive", "description": "Learn about three built-in shortcuts designed for security analysts to get the data you need, in the form you want - plus a Pro bonus.", "mainEntityOfPage": "https://blog.pulsedive.com/3-1-pulsedive-utilities-for-every-security-analyst/" } </script> <meta name="generator" content="Ghost 5.109"> <link rel="alternate" type="application/rss+xml" title="Pulsedive Blog" href="https://blog.pulsedive.com/rss/"> <script defer src="https://cdn.jsdelivr.net/ghost/sodo-search@~1.5/umd/sodo-search.min.js" data-key="f196065209a88f0a030efd9285" data-styles="https://cdn.jsdelivr.net/ghost/sodo-search@~1.5/umd/main.css" data-sodo-search="https://pulsedive.ghost.io/" data-locale="en" crossorigin="anonymous"></script> <link href="https://blog.pulsedive.com/webmentions/receive/" rel="webmention"> <script defer src="/public/cards.min.js?v=ee51204866"></script><style>:root {--ghost-accent-color: #14252E;}</style> <link rel="stylesheet" type="text/css" href="/public/cards.min.css?v=ee51204866"> <!-- Plausible --> <script defer data-domain="blog.pulsedive.com" src="https://plausible.io/js/script.js"></script> <!-- End Plausible --> <!-- Matomo --> <script> var _paq = window._paq = window._paq || []; /* tracker methods like "setCustomDimension" should be called before "trackPageView" */ _paq.push(['trackPageView']); _paq.push(['enableLinkTracking']); (function() { var u="https://pulsedive.matomo.cloud/"; _paq.push(['setTrackerUrl', u+'matomo.php']); _paq.push(['setSiteId', '5']); var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0]; g.async=true; g.src='//cdn.matomo.cloud/pulsedive.matomo.cloud/matomo.js'; s.parentNode.insertBefore(g,s); })(); </script> <!-- End Matomo Code --> <!-- Global site tag (gtag.js) - Google Analytics --> <script async src="https://www.googletagmanager.com/gtag/js?id=UA-108145347-5"></script> <script> window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'UA-108145347-5'); </script> </head> <body class="post-template tag-pulsedive is-head-left-logo has-sans-body has-cover"> <div class="viewport"> <header id="gh-head" class="gh-head outer"> <div class="gh-head-inner inner"> <div class="gh-head-brand"> <a class="gh-head-logo" href="https://blog.pulsedive.com"> <img src="https://blog.pulsedive.com/content/images/2022/03/Pulsedive-Logo_Light-Blue.png" alt="Pulsedive Blog"> </a> <button class="gh-search gh-icon-btn" aria-label="Search this site" data-ghost-search><svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke="currentColor" stroke-width="2" width="20" height="20"><path stroke-linecap="round" stroke-linejoin="round" d="M21 21l-6-6m2-5a7 7 0 11-14 0 7 7 0 0114 0z"></path></svg></button> <button class="gh-burger" aria-label="Main Menu"></button> </div> <nav class="gh-head-menu"> <ul class="nav"> <li class="nav-home"><a href="https://blog.pulsedive.com/">Home</a></li> <li class="nav-platform"><a href="https://pulsedive.com">Platform</a></li> <li class="nav-faqs"><a href="https://blog.pulsedive.com/pulsedive-cyber-threat-intelligence-faqs/">FAQs</a></li> </ul> </nav> <div class="gh-head-actions"> <button class="gh-search gh-icon-btn" aria-label="Search this site" data-ghost-search><svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke="currentColor" stroke-width="2" width="20" height="20"><path stroke-linecap="round" stroke-linejoin="round" d="M21 21l-6-6m2-5a7 7 0 11-14 0 7 7 0 0114 0z"></path></svg></button> </div> </div> </header> <div class="site-content"> <main id="site-main" class="site-main"> <article class="article post tag-pulsedive "> <header class="article-header gh-canvas"> <div class="article-tag post-card-tags"> <span class="post-card-primary-tag"> <a href="/tag/pulsedive/">pulsedive</a> </span> </div> <h1 class="article-title">3 (+1) Pulsedive Utilities For Every Security Analyst</h1> <p class="article-excerpt">Learn about three built-in shortcuts designed for security analysts to get the data you need, in the form you want - plus a Pro bonus.</p> <div class="article-byline"> <section class="article-byline-content"> <ul class="author-list instapaper_ignore"> <li class="author-list-item"> <a href="/author/grace/" class="author-avatar" aria-label="Read more of Grace Chi"> <img class="author-profile-image" src="/content/images/size/w100/2021/04/Grace-Chi-close-portrait-crop-.jpg" alt="Grace Chi" /> </a> </li> </ul> <div class="article-byline-meta"> <h4 class="author-name"><a href="/author/grace/">Grace Chi</a></h4> <div class="byline-meta-content"> <time class="byline-meta-date" datetime="2023-04-25">25 Apr 2023</time> <span class="byline-reading-time"><span class="bull">•</span> 3 min read</span> </div> </div> </section> </div> <figure class="article-image"> <img srcset="/content/images/size/w300/2023/04/Pulsedive-Tips-and-Tricks-1.jpg 300w, /content/images/size/w600/2023/04/Pulsedive-Tips-and-Tricks-1.jpg 600w, /content/images/size/w1000/2023/04/Pulsedive-Tips-and-Tricks-1.jpg 1000w, /content/images/size/w2000/2023/04/Pulsedive-Tips-and-Tricks-1.jpg 2000w" sizes="(min-width: 1400px) 1400px, 92vw" src="/content/images/size/w2000/2023/04/Pulsedive-Tips-and-Tricks-1.jpg" alt="3 (+1) Pulsedive Utilities For Every Security Analyst" /> </figure> </header> <section class="gh-content gh-canvas"> <p>Behind every investigation, there are numerous necessary steps for data collection, transformation, and import/export. While some workflows can be entirely automated (<em>the dream</em>), analysts and researchers still find themselves repeating tedious tasks over and over. Soul-crushingly manual tasks like extracting indicators or removing individual brackets from indicator names. That's why we developed these built-in utilities: to provide efficient shortcuts to get the data you need, in the form you want. </p><h2 id="1-effortlessly-parse-indicator-lists">1. Effortlessly Parse Indicator Lists</h2><p><strong>Where</strong>: Indicator Queue in Pulsedive Analyze (<a href="https://pulsedive.com/analyze/">https://pulsedive.com/analyze/</a>)</p><p><strong>What</strong>: Collect, upload, edit, parse, preview, and download a formatted list of indicators. Plain text and CSV files supported. Bonus - process them in bulk and export your enriched results, too. </p><p><strong>Why</strong>: Gathering all sorts of formats, a mix of fanged/defanged indicators, and indicator types can get messy. Many tools won't accept different formats, which means more manual editing. Use this handy function built into our interface to gather and format your list. Extract IPs, or domains and URLs, or any other combination. Add and adjust parsing exclusions as needed. Check out changes live in the "<strong>Queue</strong>" preview, then download and be merry.</p><figure class="kg-card kg-video-card"><div class="kg-video-container"><video src="https://blog.pulsedive.com/content/media/2023/04/Tips---Analyze-Parse-Indicators-1.mp4" poster="https://img.spacergif.org/v1/1280x720/0a/spacer.png" width="1280" height="720" playsinline preload="metadata" style="background: transparent url('https://blog.pulsedive.com/content/images/2023/04/media-thumbnail-ember161.jpg') 50% 50% / cover no-repeat;" /></video><div class="kg-video-overlay"><button class="kg-video-large-play-icon"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M23.14 10.608 2.253.164A1.559 1.559 0 0 0 0 1.557v20.887a1.558 1.558 0 0 0 2.253 1.392L23.14 13.393a1.557 1.557 0 0 0 0-2.785Z"/></svg></button></div><div class="kg-video-player-container"><div class="kg-video-player"><button class="kg-video-play-icon"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M23.14 10.608 2.253.164A1.559 1.559 0 0 0 0 1.557v20.887a1.558 1.558 0 0 0 2.253 1.392L23.14 13.393a1.557 1.557 0 0 0 0-2.785Z"/></svg></button><button class="kg-video-pause-icon kg-video-hide"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><rect x="3" y="1" width="7" height="22" rx="1.5" ry="1.5"/><rect x="14" y="1" width="7" height="22" rx="1.5" ry="1.5"/></svg></button><span class="kg-video-current-time">0:00</span><div class="kg-video-time">/<span class="kg-video-duration"></span></div><input type="range" class="kg-video-seek-slider" max="100" value="0"><button class="kg-video-playback-rate">1×</button><button class="kg-video-unmute-icon"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M15.189 2.021a9.728 9.728 0 0 0-7.924 4.85.249.249 0 0 1-.221.133H5.25a3 3 0 0 0-3 3v2a3 3 0 0 0 3 3h1.794a.249.249 0 0 1 .221.133 9.73 9.73 0 0 0 7.924 4.85h.06a1 1 0 0 0 1-1V3.02a1 1 0 0 0-1.06-.998Z"/></svg></button><button class="kg-video-mute-icon kg-video-hide"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M16.177 4.3a.248.248 0 0 0 .073-.176v-1.1a1 1 0 0 0-1.061-1 9.728 9.728 0 0 0-7.924 4.85.249.249 0 0 1-.221.133H5.25a3 3 0 0 0-3 3v2a3 3 0 0 0 3 3h.114a.251.251 0 0 0 .177-.073ZM23.707 1.706A1 1 0 0 0 22.293.292l-22 22a1 1 0 0 0 0 1.414l.009.009a1 1 0 0 0 1.405-.009l6.63-6.631A.251.251 0 0 1 8.515 17a.245.245 0 0 1 .177.075 10.081 10.081 0 0 0 6.5 2.92 1 1 0 0 0 1.061-1V9.266a.247.247 0 0 1 .073-.176Z"/></svg></button><input type="range" class="kg-video-volume-slider" max="100" value="100"></div></div></div></figure><h2 id="2-decode-all-the-things">2. Decode *All* The Things</h2><p><strong>Where</strong>: Pulsedive Toolbox, found in Pulsedive Community and Enterprise - it's right on our navigation bar.</p><p><strong>What</strong>: Support data analysis with convenient utilities for encoding and decoding base64 and URI strings, pretty-printing JSON data, and testing regular expressions.</p><p><strong>Why</strong>: The toolbox is handy way to decipher, manipulate, and parse out interesting nuggets of information during your investigation, without needing to open <em>yet another</em> tab. Our toolbox, particularly the "<strong>magic decode</strong>" button, helps analysts easily identify what they're looking for. Need something a little more sophisticated? We conveniently linked GCHQ's <a href="https://gchq.github.io/CyberChef/">CyberChef</a> in the toolbox, so you can cook up all sorts of more complex recipes. Plus, Pulsedive doesn't see or save any of the toolbox input - it is 100% client-side code. Decode away!</p><figure class="kg-card kg-video-card"><div class="kg-video-container"><video src="https://blog.pulsedive.com/content/media/2023/04/Tips---Pulsedive-Toolbox---Base64-Decoding.mp4" poster="https://img.spacergif.org/v1/1280x720/0a/spacer.png" width="1280" height="720" playsinline preload="metadata" style="background: transparent url('https://blog.pulsedive.com/content/images/2023/04/media-thumbnail-ember182.jpg') 50% 50% / cover no-repeat;" /></video><div class="kg-video-overlay"><button class="kg-video-large-play-icon"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M23.14 10.608 2.253.164A1.559 1.559 0 0 0 0 1.557v20.887a1.558 1.558 0 0 0 2.253 1.392L23.14 13.393a1.557 1.557 0 0 0 0-2.785Z"/></svg></button></div><div class="kg-video-player-container"><div class="kg-video-player"><button class="kg-video-play-icon"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M23.14 10.608 2.253.164A1.559 1.559 0 0 0 0 1.557v20.887a1.558 1.558 0 0 0 2.253 1.392L23.14 13.393a1.557 1.557 0 0 0 0-2.785Z"/></svg></button><button class="kg-video-pause-icon kg-video-hide"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><rect x="3" y="1" width="7" height="22" rx="1.5" ry="1.5"/><rect x="14" y="1" width="7" height="22" rx="1.5" ry="1.5"/></svg></button><span class="kg-video-current-time">0:00</span><div class="kg-video-time">/<span class="kg-video-duration"></span></div><input type="range" class="kg-video-seek-slider" max="100" value="0"><button class="kg-video-playback-rate">1×</button><button class="kg-video-unmute-icon"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M15.189 2.021a9.728 9.728 0 0 0-7.924 4.85.249.249 0 0 1-.221.133H5.25a3 3 0 0 0-3 3v2a3 3 0 0 0 3 3h1.794a.249.249 0 0 1 .221.133 9.73 9.73 0 0 0 7.924 4.85h.06a1 1 0 0 0 1-1V3.02a1 1 0 0 0-1.06-.998Z"/></svg></button><button class="kg-video-mute-icon kg-video-hide"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M16.177 4.3a.248.248 0 0 0 .073-.176v-1.1a1 1 0 0 0-1.061-1 9.728 9.728 0 0 0-7.924 4.85.249.249 0 0 1-.221.133H5.25a3 3 0 0 0-3 3v2a3 3 0 0 0 3 3h.114a.251.251 0 0 0 .177-.073ZM23.707 1.706A1 1 0 0 0 22.293.292l-22 22a1 1 0 0 0 0 1.414l.009.009a1 1 0 0 0 1.405-.009l6.63-6.631A.251.251 0 0 1 8.515 17a.245.245 0 0 1 .177.075 10.081 10.081 0 0 0 6.5 2.92 1 1 0 0 0 1.061-1V9.266a.247.247 0 0 1 .073-.176Z"/></svg></button><input type="range" class="kg-video-volume-slider" max="100" value="100"></div></div></div></figure><h2 id="3-safe-indicator-handling-or-not-its-your-choice">3. Safe Indicator Handling (...Or Not, It's Your Choice!)</h2><p><strong>Where</strong>: Indicator copy-paste on all Indicator pages, e.g. <a href="https://pulsedive.com/indicator/pulsedive.com">https://pulsedive.com/indicator/pulsedive.com</a></p><p><strong>What</strong>: One-click copy a de-fanged or fanged indicator.</p><p><strong>Why</strong>: While it sounds simple enough, it can be a serious nuisance when analysts need a specific format for a report and enrichment platforms only offer one. That's why we give you the option of copying either format you choose - de-fanged/sanitized or fanged/un-sanitized. For user safety, the defanged copy is the more obvious default one.</p><figure class="kg-card kg-video-card"><div class="kg-video-container"><video src="https://blog.pulsedive.com/content/media/2023/04/Defanging.mp4" poster="https://img.spacergif.org/v1/1280x720/0a/spacer.png" width="1280" height="720" playsinline preload="metadata" style="background: transparent url('https://blog.pulsedive.com/content/images/2023/04/media-thumbnail-ember234.jpg') 50% 50% / cover no-repeat;" /></video><div class="kg-video-overlay"><button class="kg-video-large-play-icon"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M23.14 10.608 2.253.164A1.559 1.559 0 0 0 0 1.557v20.887a1.558 1.558 0 0 0 2.253 1.392L23.14 13.393a1.557 1.557 0 0 0 0-2.785Z"/></svg></button></div><div class="kg-video-player-container"><div class="kg-video-player"><button class="kg-video-play-icon"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M23.14 10.608 2.253.164A1.559 1.559 0 0 0 0 1.557v20.887a1.558 1.558 0 0 0 2.253 1.392L23.14 13.393a1.557 1.557 0 0 0 0-2.785Z"/></svg></button><button class="kg-video-pause-icon kg-video-hide"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><rect x="3" y="1" width="7" height="22" rx="1.5" ry="1.5"/><rect x="14" y="1" width="7" height="22" rx="1.5" ry="1.5"/></svg></button><span class="kg-video-current-time">0:00</span><div class="kg-video-time">/<span class="kg-video-duration"></span></div><input type="range" class="kg-video-seek-slider" max="100" value="0"><button class="kg-video-playback-rate">1×</button><button class="kg-video-unmute-icon"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M15.189 2.021a9.728 9.728 0 0 0-7.924 4.85.249.249 0 0 1-.221.133H5.25a3 3 0 0 0-3 3v2a3 3 0 0 0 3 3h1.794a.249.249 0 0 1 .221.133 9.73 9.73 0 0 0 7.924 4.85h.06a1 1 0 0 0 1-1V3.02a1 1 0 0 0-1.06-.998Z"/></svg></button><button class="kg-video-mute-icon kg-video-hide"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M16.177 4.3a.248.248 0 0 0 .073-.176v-1.1a1 1 0 0 0-1.061-1 9.728 9.728 0 0 0-7.924 4.85.249.249 0 0 1-.221.133H5.25a3 3 0 0 0-3 3v2a3 3 0 0 0 3 3h.114a.251.251 0 0 0 .177-.073ZM23.707 1.706A1 1 0 0 0 22.293.292l-22 22a1 1 0 0 0 0 1.414l.009.009a1 1 0 0 0 1.405-.009l6.63-6.631A.251.251 0 0 1 8.515 17a.245.245 0 0 1 .177.075 10.081 10.081 0 0 0 6.5 2.92 1 1 0 0 0 1.061-1V9.266a.247.247 0 0 1 .073-.176Z"/></svg></button><input type="range" class="kg-video-volume-slider" max="100" value="100"></div></div></div></figure><h2 id="1-pro-bonus-all-in-one-3rd-party-enrichment">+1 Pro Bonus: All-in-One 3rd Party Enrichment</h2><p><strong>Where</strong>: 3rd party enrichment and reference URLs on all Indicator pages for <a href="https://pulsedive.com/pro">Pro</a> subscribers, e.g. <a href="https://pulsedive.com/indicator/?iid=443392">https://pulsedive.com/indicator/?iid=443392</a> </p><p><strong>What</strong>: In addition to the one-click or auto-fetch enrichment from VirusTotal, Shodan, and AbuseIPDB, hit Expand to grab reference URLs to go straight to the (3rd party) source. The integration modal also displays summary and raw responses for ease of review.</p><p><strong>Why</strong>: As much as the industry strives to chase the "single pane of glass" vision, sometimes it's easier to go to the source or continue triage in a specific UI. That's why we embedded the reference URL - so you can stay focused on the task and avoid more window-opening, copying, and potential distractions.</p><figure class="kg-card kg-video-card"><div class="kg-video-container"><video src="https://blog.pulsedive.com/content/media/2023/04/Tips---Pulsedive-Pro-3rd-Party-Reference-URLs.mp4" poster="https://img.spacergif.org/v1/1280x720/0a/spacer.png" width="1280" height="720" playsinline preload="metadata" style="background: transparent url('https://blog.pulsedive.com/content/images/2023/04/media-thumbnail-ember250.jpg') 50% 50% / cover no-repeat;" /></video><div class="kg-video-overlay"><button class="kg-video-large-play-icon"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M23.14 10.608 2.253.164A1.559 1.559 0 0 0 0 1.557v20.887a1.558 1.558 0 0 0 2.253 1.392L23.14 13.393a1.557 1.557 0 0 0 0-2.785Z"/></svg></button></div><div class="kg-video-player-container"><div class="kg-video-player"><button class="kg-video-play-icon"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M23.14 10.608 2.253.164A1.559 1.559 0 0 0 0 1.557v20.887a1.558 1.558 0 0 0 2.253 1.392L23.14 13.393a1.557 1.557 0 0 0 0-2.785Z"/></svg></button><button class="kg-video-pause-icon kg-video-hide"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><rect x="3" y="1" width="7" height="22" rx="1.5" ry="1.5"/><rect x="14" y="1" width="7" height="22" rx="1.5" ry="1.5"/></svg></button><span class="kg-video-current-time">0:00</span><div class="kg-video-time">/<span class="kg-video-duration"></span></div><input type="range" class="kg-video-seek-slider" max="100" value="0"><button class="kg-video-playback-rate">1×</button><button class="kg-video-unmute-icon"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M15.189 2.021a9.728 9.728 0 0 0-7.924 4.85.249.249 0 0 1-.221.133H5.25a3 3 0 0 0-3 3v2a3 3 0 0 0 3 3h1.794a.249.249 0 0 1 .221.133 9.73 9.73 0 0 0 7.924 4.85h.06a1 1 0 0 0 1-1V3.02a1 1 0 0 0-1.06-.998Z"/></svg></button><button class="kg-video-mute-icon kg-video-hide"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M16.177 4.3a.248.248 0 0 0 .073-.176v-1.1a1 1 0 0 0-1.061-1 9.728 9.728 0 0 0-7.924 4.85.249.249 0 0 1-.221.133H5.25a3 3 0 0 0-3 3v2a3 3 0 0 0 3 3h.114a.251.251 0 0 0 .177-.073ZM23.707 1.706A1 1 0 0 0 22.293.292l-22 22a1 1 0 0 0 0 1.414l.009.009a1 1 0 0 0 1.405-.009l6.63-6.631A.251.251 0 0 1 8.515 17a.245.245 0 0 1 .177.075 10.081 10.081 0 0 0 6.5 2.92 1 1 0 0 0 1.061-1V9.266a.247.247 0 0 1 .073-.176Z"/></svg></button><input type="range" class="kg-video-volume-slider" max="100" value="100"></div></div></div></figure><h2 id="conclusion">Conclusion</h2><p>From the very beginning, Pulsedive has been an analyst and practitioner-driven platform. A core pillar in our company philosophy is to "be frictionless" - which includes eliminating barriers that users face in their day-to-day responsibilities. We hope you find these utilities useful and would love to hear what else we can build into our products to simplify your everyday processes.</p><p>Interested in more not-so-hidden secrets in the Pulsedive Community Platform? Let us know at <a href="mailto:support@pulsedive.com">support@pulsedive.com</a>.</p> </section> </article> </main> <aside class="read-more-wrap outer"> <div class="read-more inner"> <article class="post-card post featured"> <a class="post-card-image-link" href="/assemblyline-101-open-source-malware-triage/"> <img class="post-card-image" srcset="/content/images/size/w300/2025/01/Assemblyline-Cover.jpg 300w, /content/images/size/w600/2025/01/Assemblyline-Cover.jpg 600w, /content/images/size/w1000/2025/01/Assemblyline-Cover.jpg 1000w, /content/images/size/w2000/2025/01/Assemblyline-Cover.jpg 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/content/images/size/w600/2025/01/Assemblyline-Cover.jpg" alt="Assemblyline 101 - Open Source Malware Triage" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/assemblyline-101-open-source-malware-triage/"> <header class="post-card-header"> <div class="post-card-tags"> <span class="post-card-featured"><svg width="16" height="17" viewBox="0 0 16 17" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M4.49365 4.58752C3.53115 6.03752 2.74365 7.70002 2.74365 9.25002C2.74365 10.6424 3.29678 11.9778 4.28134 12.9623C5.26591 13.9469 6.60127 14.5 7.99365 14.5C9.38604 14.5 10.7214 13.9469 11.706 12.9623C12.6905 11.9778 13.2437 10.6424 13.2437 9.25002C13.2437 6.00002 10.9937 3.50002 9.16865 1.68127L6.99365 6.25002L4.49365 4.58752Z" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"></path> </svg> Featured</span> </div> <h2 class="post-card-title"> Assemblyline 101 - Open Source Malware Triage </h2> </header> <div class="post-card-excerpt">Learn how to install and use Assemblyline, the open-source malware triage tool. This 101 includes an overview, deployment walkthrough, example use case, and resources.</div> </a> <footer class="post-card-meta"> <time class="post-card-meta-date" datetime="2025-01-07">07 Jan 2025</time> <span class="post-card-meta-length">10 min read</span> </footer> </div> </article> <article class="post-card post"> <a class="post-card-image-link" href="/2024-in-review/"> <img class="post-card-image" srcset="/content/images/size/w300/2024/12/Year-in-Review-Cover-2024-1.jpg 300w, /content/images/size/w600/2024/12/Year-in-Review-Cover-2024-1.jpg 600w, /content/images/size/w1000/2024/12/Year-in-Review-Cover-2024-1.jpg 1000w, /content/images/size/w2000/2024/12/Year-in-Review-Cover-2024-1.jpg 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/content/images/size/w600/2024/12/Year-in-Review-Cover-2024-1.jpg" alt="2024 In Review" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/2024-in-review/"> <header class="post-card-header"> <div class="post-card-tags"> </div> <h2 class="post-card-title"> 2024 In Review </h2> </header> <div class="post-card-excerpt">A rewind of the year across the threat landscape and at Pulsedive.</div> </a> <footer class="post-card-meta"> <time class="post-card-meta-date" datetime="2024-12-30">30 Dec 2024</time> <span class="post-card-meta-length">13 min read</span> </footer> </div> </article> <article class="post-card post"> <a class="post-card-image-link" href="/black-friday-2024/"> <img class="post-card-image" srcset="/content/images/size/w300/2024/11/BFCM4.png 300w, /content/images/size/w600/2024/11/BFCM4.png 600w, /content/images/size/w1000/2024/11/BFCM4.png 1000w, /content/images/size/w2000/2024/11/BFCM4.png 2000w" sizes="(max-width: 1000px) 400px, 800px" src="/content/images/size/w600/2024/11/BFCM4.png" alt="Black Friday 2024" loading="lazy" /> </a> <div class="post-card-content"> <a class="post-card-content-link" href="/black-friday-2024/"> <header class="post-card-header"> <div class="post-card-tags"> </div> <h2 class="post-card-title"> Black Friday 2024 </h2> </header> <div class="post-card-excerpt">This Black Friday, get 30% off Pulsedive Pro to boost your threat intelligence research and analysis flows.</div> </a> <footer class="post-card-meta"> <time class="post-card-meta-date" datetime="2024-11-19">19 Nov 2024</time> <span class="post-card-meta-length">4 min read</span> </footer> </div> </article> </div> </aside> </div> <footer class="site-footer outer"> <div class="inner"> <section class="copyright"><a href="https://blog.pulsedive.com">Pulsedive Blog</a> © 2025</section> <nav class="site-footer-nav"> <ul class="nav"> <li class="nav-twitter"><a href="https://twitter.com/pulsedive">Twitter</a></li> <li class="nav-linkedin"><a href="https://www.linkedin.com/company/pulsedive/">LinkedIn</a></li> <li class="nav-about"><a href="https://pulsedive.com/about">About</a></li> </ul> </nav> <div class="gh-powered-by"><a href="https://ghost.org/" target="_blank" rel="noopener">Powered by Ghost</a></div> </div> </footer> </div> <div class="pswp" tabindex="-1" role="dialog" aria-hidden="true"> <div class="pswp__bg"></div> <div class="pswp__scroll-wrap"> <div class="pswp__container"> <div class="pswp__item"></div> <div class="pswp__item"></div> <div class="pswp__item"></div> </div> <div class="pswp__ui pswp__ui--hidden"> <div class="pswp__top-bar"> <div class="pswp__counter"></div> <button class="pswp__button pswp__button--close" title="Close (Esc)"></button> <button class="pswp__button pswp__button--share" title="Share"></button> <button class="pswp__button pswp__button--fs" title="Toggle fullscreen"></button> <button class="pswp__button pswp__button--zoom" title="Zoom in/out"></button> <div class="pswp__preloader"> <div class="pswp__preloader__icn"> <div class="pswp__preloader__cut"> <div class="pswp__preloader__donut"></div> </div> </div> </div> </div> <div class="pswp__share-modal pswp__share-modal--hidden pswp__single-tap"> <div class="pswp__share-tooltip"></div> </div> <button class="pswp__button pswp__button--arrow--left" title="Previous (arrow left)"></button> <button class="pswp__button pswp__button--arrow--right" title="Next (arrow right)"></button> <div class="pswp__caption"> <div class="pswp__caption__center"></div> </div> </div> </div> </div> <script src="https://code.jquery.com/jquery-3.5.1.min.js" integrity="sha256-9/aliU8dGd2tb6OSsuzixeV4y/faTqgFtohetphbbj0=" crossorigin="anonymous"> </script> <script src="https://blog.pulsedive.com/assets/built/casper.js?v=ee51204866"></script> <script> $(document).ready(function () { // Mobile Menu Trigger $('.gh-burger').click(function () { $('body').toggleClass('gh-head-open'); }); // FitVids - Makes video embeds responsive $(".gh-content").fitVids(); }); </script> </body> </html>