MANDIANT IOC Editor is an editor for Indicators of Compromise (lOCs). It can also be used for generating XPath filters, and comparing two lOCs. IOCs are XML documents that help incident responders capture diverse information about threats including attributes of malicious files, characteristics of registry changes, etc.
Comments