IOC Parser is a tool to extract indicators of compromise from security reports in PDF format. A good collection of APT related reports with many IOCs can be found here: APTNotes.

ioc-parser.py [-h] [-p INI] [-f FORMAT] [-d] [-l LIB] PDF

• PDF File/directory path to PDF report(s)
• -p INI Pattern file
• -f FORMAT Output format (csv/json/yara)
• -d Deduplicate matches
• -l LIB Parsing library

One of the following PDF parsing libraries:

• PyPDF2 - pip install pypdf2
• pdfminer - pip install pdfminer