# Byte-compiled / optimized / DLL files
__pycache__/
*.py[cod]
*$py.class
*.pyc
*.pyo
*~

# C extensions
*.so

# Distribution / packaging
.Python
build/
develop-eggs/
dist/
downloads/
eggs/
.eggs/
lib/
lib64/
parts/
sdist/
var/
wheels/
share/python-wheels/
*.egg-info/
.installed.cfg
*.egg
MANIFEST
*.whl

# PyInstaller
*.manifest
*.spec

# Installer logs
pip-log.txt
pip-delete-this-directory.txt

# Unit test / coverage reports
htmlcov/
.tox/
.nox/
.coverage
.coverage.*
.cache
nosetests.xml
coverage.xml
*.cover
*.py,cover
.hypothesis/
.pytest_cache/
cover/
.benchmarks/
*.coverage

# Translations
*.mo
*.pot

# Django stuff:
*.log
local_settings.py
db.sqlite3
db.sqlite3-journal

# Flask stuff:
instance/
.webassets-cache

# Scrapy stuff:
.scrapy

# Sphinx documentation
docs/_build/

# PyBuilder
.pybuilder/
target/

# Jupyter Notebook
.ipynb_checkpoints
*.ipynb

# IPython
profile_default/
ipython_config.py

# pyenv
.python-version

# pipenv
Pipfile.lock

# poetry
poetry.lock

# pdm
.pdm.toml
.pdm-python

# PEP 582
__pypackages__/

# Celery stuff
celerybeat-schedule
celerybeat.pid

# SageMath parsed files
*.sage.py

# Environments
.env
.venv
env/
venv/
ENV/
env.bak/
venv.bak/
virtualenv/
.virtualenv/

# Spyder project settings
.spyderproject
.spyproject

# Rope project settings
.ropeproject

# mkdocs documentation
/site

# mypy
.mypy_cache/
.dmypy.json
dmypy.json

# Pyre type checker
.pyre/

# pytype static type analyzer
.pytype/

# Cython debug symbols
cython_debug/

# PyCharm
.idea/
*.iml
*.iws
*.ipr

# VS Code
.vscode/
*.code-workspace
.history/

# Sublime Text
*.sublime-project
*.sublime-workspace

# macOS
.DS_Store
.AppleDouble
.LSOverride
Icon
._*
.DocumentRevisions-V100
.fseventsd
.Spotlight-V100
.TemporaryItems
.Trashes
.VolumeIcon.icns
.com.apple.timemachine.donotpresent

# Windows
Thumbs.db
ehthumbs.db
Desktop.ini
$RECYCLE.BIN/
*.lnk

# Linux
*~
.directory
.Trash-*

# Project specific - IOC outputs
temp/
tmp/
*.iocs.txt
*.iocs.json
*_iocs.txt
*_iocs.json
*_ioc.txt
*_ioc.json
escritura_iocs.txt
stdin_iocs.txt
test_iocs.txt

# Test files and outputs
test_output/
test_results/
test_*.txt
test_*.json
*.test.txt
*.test.json

# Security
.secrets.baseline
secrets.json
*.key
*.pem
*.crt
*.cer

# Development tools and quality assurance
.ruff_cache/
.bandit/
.black_cache/
.isort_cache/
.pylint.d/
.pylint_cache/
.qlty/
.quality/
bandit.json
bandit.yaml
bandit.yml
pylint.rc
pylint.ini
.pylintrc
quality_report.txt
quality_report.json
lint_report.txt
lint_report.json

# Tox testing
.tox/
tox.ini.lock
.tox.ini

# Pre-commit hooks
.pre-commit-hooks.yaml.lock
.pre-commit-config.yaml

# Development and build files (keep locally, not in repo)
CONTRIBUTING.md
QUALITY.md
Makefile
build_package.py
setup_quality.sh
tox.ini
MANIFEST.in

# Tests directory - SHOULD be tracked in repo
# tests/

# Old modules directory at root level (keep locally, not in repo)
/modules/

# Backup files
*.backup
*.bak
*.orig
*_original.py
*_backup.py
*.old
*.save
*.swp
*.swo
*.swn

# MISP cache (keep the directory but not the cache files)
iocparser/modules/data/misp_warninglists_cache.json
iocparser/modules/data/misp_warninglists_metadata.json
iocparser/modules/data/*.cache

# Downloaded content
securelist.com*
kaspersky.com*
malware_report*
threat_report*
ioc_report*

# Claude/AI tool artifacts
.claude/
.ai_tools/
.copilot/
**/CLAUDE.md

# Performance profiling
*.prof
*.stats
.profile/
profile_results/

# Documentation builds
docs/build/
docs/_build/
_build/

# Package manager files
package-lock.json
yarn.lock
pnpm-lock.yaml

# Temporary editor files
\#*\#
.emacs.desktop
.emacs.desktop.lock
*.elc
auto-save-list
tramp
.\#*

# Vim
[._]*.s[a-v][a-z]
[._]*.sw[a-p]
[._]s[a-rt-v][a-z]
[._]ss[a-gi-z]
[._]sw[a-p]
Session.vim
.netrwhist
tags

# TextMate
*.tmproj
*.tmproject
tmtags

# Other
.svn
.hg
.bzr
_darcs
.project
.pydevproject
.settings/
.loadpath