Foundation glossary/Threat intel
IOC
Companion card for the Foundation course — study the related lesson for full progress.
Simple explanation
A clue that something bad happened.
Technical explanation
Hash, IP, domain, email indicator.
Real-life scenario
A known bad link domain showing up in your Gmail quarantine.
Security relevance
IOCs help block known-bad — but they expire; pair with TTPs.
Practical example
Malware SHA-256, C2 domain.
Hash
IP / domain
Email
Mini quiz
A malware SHA-256 is typically an:
Related lesson
No direct lesson slug yet — use the Foundation course syllabus or roadmap level threat-intel.