I just published a new update of my imap2thehive tool. A quick reminder: this tool is aimed to poll an IMAP mailbox and feed an instance of TheHive with processed emails. This new version is now able to extract interesting IOCs from the email body and attached HTML files. The following indicators are
[The post Imap2TheHive: Support for Observables has been first published on /dev/random]

https://blog.rootshell.be/2018/05/14/imap2thehive-support-observables/