extract and vet indicators of compromise from raw data