IoC: The Digital Clues That Show a Computer Was Hacked

Sun, 26 Jul 2026 04:21:42 +0900

🤔 What Is It?

IoC(Indicator of Compromise)

An Indicator of Compromise (IoC) is a digital clue — like a suspicious file or an unusual connection — that tells security experts a computer may have been attacked. By collecting and sharing these clues, security teams can spot the same hackers targeting other systems too.

🧩 Like a detective’s crime-scene clue book

Imagine a burglar breaks into a house and gets away, but they leave clues behind — a muddy boot print near the back door, a greasy fingerprint on the window, and scratch marks on the lock. A detective arrives, photographs every clue, and records them all in an evidence book. Then that detective shares the book with every police station in the country, so if those same boot prints or fingerprints turn up at another crime scene, officers instantly know: it’s the same burglar. IoCs work exactly the same way — except the crime scene is a hacked computer, the clues are things like suspicious files or unusual connections, and the detectives are security analysts sharing their evidence book with the whole world.

Digital-Forensics on Explain It

IoC: The Digital Clues That Show a Computer Was Hacked

🤔 What Is It?

🧩 Like a detective’s crime-scene clue book