Defensive Security (Blue Team) / Detection
Lesson 22 of 32
Threat intelligence
Threat intel is information about attackers: their IPs, domains, file hashes and techniques. Feed it into your tools to block known bad things.
Key points
- IOCs: indicators of compromise
- Hashes, IPs, domains
- Behaviour lasts longer than IPs
Quiz · +10 XP
What is an IOC?
Log in to save progress and earn XP.