ICEDID Configuration Extractor

This document describes a Python-based tool for extracting configurations/payloads from ICEDID malware samples, including instructions to run it via Docker or locally with Poetry, command examples for processing single files or directories, and where outputs are stored. It serves as operational guidance for using the extractor rather than a threat or incident analysis report.