TARGETING LATE Q4 2026Release date and final specification to be confirmedJoin the launch list for the planned 10% offer
← The Acorn overview

The Acorn application guide

IP Extractor

Four historical IP addresses from a published security advisory form this example. Extract them locally, then keep the advisory date and context with the results. Their presence on an old list does not establish current malicious activity.

Demonstrated in the recorded development build

Extract addresses without losing their source and date

Example input

  • A local text list transcribed from a dated public advisory, with online enrichment disabled.

Result or controls shown

  • Extracted local IP indicators and optional enrichment controls.
IP Extractor parses four historical indicators transcribed from the joint NSA/CISA/NCSC advisory, version 1.1 of September 2025, table 3. Online enrichment is off. View full screen
IP Extractor parses four historical indicators transcribed from the joint NSA/CISA/NCSC advisory, version 1.1 of September 2025, table 3. Online enrichment is off.

Enlarge the screenshot to read the source records.

Examination steps

Steps to review in your evaluation

  1. Select the material and extract address-like indicators.

  2. Retain their source and historical context.

  3. Assess any proposed enrichment separately and avoid treating old references as current attribution.

Start with your requirements

Request an application demo

Tell us the source type and task you want to examine. We can plan a demo using suitable training material. Do not send confidential evidence.

Zoom in, then scroll to inspect the detail.

Open full-resolution image ↗

A useful first conversation

Let’s look at your workflow

Tell us what you examine, where you work and what you need to deliver.

Use the enquiry form to outline your role, intended use and potential order quantity. Do not send case material through a general enquiry.

Your enquiry goes to the SQFR team. Please do not include passwords or case evidence.