About Indicators of Compromise

An Indicator of Compromise (IoC) is a set of data about an object or activity that indicates unauthorized access to the device (compromise of data). For example, the path to a file in which a threat has been detected on one of your users' devices is an Indicator of Compromise for other devices.

Kaspersky Endpoint Security Cloud can detect threats by using the following types of IoCs:

• File indicators:
  • MD5 checksum of a file
  • SHA256 checksum of a file
  • Path to a file
• IP address of a remote computer
• Registry key

Page top