I'm not exactly sure how to approach this. I have an IOC that is an image in an html based email with a height=0 and width=0. I think I need write a LUA parser. I'm not up to speed with this. Is there anyone that can help?
Sample message segment:
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252"></head>
<img src="hxxp://www.badsite.com/directory/image.png" width="0" height="0">