ThreatLens

ThreatLens is a command-line tool that consolidates threat intelligence queries for IPs, domains, URLs, file hashes, and CVEs from six free OSINT APIs. It outputs color-coded Excel, JSON, and CSV reports, supports log parsing (Zeek, Suricata, Sysmon), CVE triage with actionable decision cards, asset inventory correlation, and optional SIEM export. It is targeted at SOC analysts and incident responders needing fast, reliable IOC enrichment from the terminal without navigating multiple websites.