Remember IOC
Full name: Indicator of Compromise
Memory aid: Indicator Offers a Clue.
An indicator requires context and can produce false positives.
Study area: Threats & application security · Batch 3
Relevant study for: CompTIA Security+ SY0-701 · ISC2 CISSP 2024 outline · CompTIA CySA+ · CompTIA PenTest+
Practice with exam flashcards →Cybersecurity & Identity / Knowledge library
IOC — Indicator of Compromise
Provides an observable clue that may indicate compromise.
Why learn IOC — Indicator of Compromise?
Provides an observable clue that may indicate compromise.
Where it came from
An indicator requires context and can produce false positives.
- Memory aid (a learning cue, not the expansion): Indicator Offers a Clue.
Build your understanding
Work through these exercises in order. Try the task before opening a reference.
- Without looking, expand IOC: Indicator of Compromise.
- Recall this memory aid: Indicator Offers a Clue.
- Explain the practical use: Provides an observable clue that may indicate compromise.
- Explain this distinction: An indicator requires context and can produce false positives.
- Identify IOC in a device specification, architecture diagram, or system inventory.
Documentation and sources
- NIST cybersecurity glossary (csrc.nist.gov)