last seen

IOC Pyramid of Pain

Optimizing IOC Retention Time

| | ascii-art, Expiration date, false positive, Ghost IOC, ids, IOC, last seen, lifespan, lifetime, NDR, Pyramid of Pain, RFC9424, SIEM
Are you importing indicators of compromise (IOC) in the form of domain names and IP addresses into your SIEM, NDR or IDS? If so, have you considered for how long you should ...
NETRESEC Network Security Blog