Skip to content

Glossary: Network Attacks, Social Engineering and Indicators

indicator of compromise (IoC)

Also written: IoC, IoCs, indicators of compromise

Evidence that a system has already been breached, such as a known bad file hash, a connection to a known bad address, or a strange process. Defenders search for IoCs and share them.

Where the book teaches it

Related terms

threat intelligence feedPyramid of Painhash