Indicators of Attack and Indicators of Compromise
In this lesson we’re going to clear up two terms you’ll hear constantly in security operations: Indicators of Compromise, or IoCs, and Indicators of Attack, or IoAs. Think of them as two kinds of “clues.” IoCs are the digital evidence that something bad already happened—breadcrumbs left behind after compromise. IoAs are the behaviors that suggest an attack is underway or about to succeed—more like catching the burglar while they’re still in the house.
By the end of this video you should be able to: (1) define IoCs and IoAs, (2) explain how they differ, (3) list practical examples of each, and (4) describe how responders use them to detect, scope, contain, and recover from incidents.
=====
Video Script
https://adventuresinsecurity.com/scri...