Site Glossary

A data point associated with malicious activity, such as a file hash, domain, IP, registry key, mutex name, or process behavior. IOCs guide searches and detections but typically require corroboration to prove criminal responsibility.