Problem Statement
Which is a typical Indicator of Compromise (IOC)?
Explanation
IOCs are concrete signs that something bad likely happened. Hashes, domains, IPs, mutex names, and file paths are common. Pair them with behavior to avoid false positives.
Code Solution
SolutionRead Only
sha256: d2a5... observed in C:\Windows\Temp\svc.exe
