# Indicators of Compromise (IOCs)

> Master extracting and utilizing Indicators of Compromise (IOCs). Learn to identify file hashes, network signatures, and host artifacts for effective threat hunting.

Canonical: https://codelivly.com/rooms/indicators-of-compromise-iocs
Last updated: 2026-09-16

| | |
|---|---|
| Level | Intermediate |
| Category | Forensics |
| Lessons | 3 |
| Estimated time | 30 min |
| XP | 100 |

This module focuses on the critical output of malware analysis: Indicators of Compromise (IOCs). You will learn how to systematically extract, categorize, and validate IOCs from both static and dynamic analysis. Topics include file hashes, network signatures (IPs, domains, URLs), host-based artifacts (registry keys, file paths, mutexes), and behavioral patterns. By mastering IOC extraction and management, you will be able to translate a single malware sample into actionable intelligence, enabling enterprise-wide threat hunting, SIEM alerting, and rapid incident containment.

## Lessons

1. What Are IOCs and Why Do They Matter (30 min)
2. Types of IOCs (Hashes, IPs, Domains, Registry Keys) (30 min)
3. Guided Lab: Building an IOC Report from a Sample (30 min)

## Related

- [Learning path: Malware Analysis Fundamentals](https://codelivly.com/learning-paths/malware-analysis-fundamentals)
- [All rooms](https://codelivly.com/rooms)