CompTIA CySA+ CS0-003 Practice Question

Indicators of Compromise (IoCs) are artifacts observed on a network or in an operating system that with high confidence indicate a computer intrusion. Understanding IoCs is vital for cybersecurity analysts as they allow for early detection of breaches and initiate a response. False positives, such as Anti-Virus Alerts, are sometimes mistaken for IoCs but they often require further investigation as they could also be indicative of a false alarm or benign activity. Unusual outbound traffic could be an IoC, but it is not a definitive indication on its own; it needs corroboration with other signs of compromise. Heightened data usage may raise suspicions but does not necessarily provide evidence of a breach.