Can I read Cisco Endpoint IOC Attributes on EtoBox?

Cisco Endpoint IOC Attributes by Kiril Petkov is a document available to read on EtoBox.

What is Cisco Endpoint IOC Attributes about?

The document describes the Endpoint IOC feature which allows importing indicators of compromise to detect artifacts on systems. It details capabilities like matching on multiple attributes within a single IOC document. Sample IOC documents are listed that can be used for specific malware families.

Author

Kiril Petkov

Language

EN