Question

What are the several indicators of compromise(IOC) that organizations should monitor?

Answer 1

The key indicators of compromise that organizations should monitor are listed below:

• Unusual Outbound Network Traffic
• HTML Response Sizes
• Geographical Irregularities
• Increases in Database Read Volume
• Log-In Red Flags
• Unexpected Patching of Systems
• Large Numbers of Requests for the Same File
• Web Traffic with Unhuman Behavior
• Suspicious Registry or System File Changes
• Unusual DNS Requests
• Mobile Device Profile Changes
• Bundles of Data in the Wrong Place
• Mismatched Port-Application Traffic
• Signs of DDoS Activity
• Anomalies in Privileged User Account Activity