Documentation
Parsers

Parsers overview

How parser packages turn triage files into hunt records.

A parser is a Python package that processes files in a triage package and writes structured records to the hunt index.

Operators install and configure packages on Parsers (/UI/parsers/list). Developers build the files inside the package.

AudiencePage
OperatorsManaging
DevelopersDeveloping
Advanced matching and parametersCustomization

You can also install parser packages from Store.

After a parser is installed it appears in Upload & Process when you configure parsers for a case.