About Indicators of Compromise

An Indicator of Compromise (IoC) is a set of data about an object or activity that indicates unauthorized access to the device (compromise of data). For example, the path to a file in which a threat has been detected on one of your users' devices is an Indicator of Compromise for other devices.

Kaspersky Next can detect threats by using the following types of IoCs:

• File indicators:
  • MD5 checksum of a file
  • SHA256 checksum of a file
  • Path to a file
• IP address of a remote computer
• Registry key

Page top