What is an IOC?

An IOC is an "Indicator of Compromise" and is typically a hash value (e.g. MD5, SHA-256), IP address, Domain, URL. They are needed for further threat intelligence research, threat detection and protection. In general, our analysis engine extracts all potential IOCs. An indicator listed in the IOC section may be benign or white noise.