Friday, September 3, 2010

Mandiant's "Indicator of Compromise" (IOC) -- Part 2

Well, lots has happened since my last blog post. I'll try to focus on the things about APT and IOC that might interest you.

Mandiant had some interesting presentations about IOC and released the free tool IOCe to create them. There's also a forum about OpenIOC.
So there's the long overdue update on IOC.

Lots of other interesting things to talk about... as soon as I find time to write more :-)