Operations & SOC
침해 지표IOC
Definition
Forensic artifact that signals compromise (malicious IP, domain, file hash, …).
For executives (CEO·CISO)
The basic unit of threat sharing/blocking, but IOCs describe the known past and lag new attacks. Commonly missed: do not rely on IOC blocking alone — pair it with behavior/intent (TTP) detection to catch first-seen attacks.