IOC's, or Indicators of Compromise, and other threat intelligence feeds are clues information security teams can use to assist in the detection of an incident. EnCase Endpoint Security leverages IOC's and threat intelligence, like STIX and YARA, to detect those threats across the enterprise.