IR

Indicator of compromise IOC

Evidence that a system has already been breached — a strange file, an unusual login location, traffic to a known-bad address.

Related terms

IR Threat intelligence Information about active attackers used to anticipate and recognize them. IR Security information and event management Collects logs across systems and correlates them to surface suspicious activity.
← Back to Detection & response