Q: 19
When building an IOC hunting query, analysts should focus on:
Options
Discussion
A
Its A, seen similar in practice Qs, has to be known bad hashes or domains for IOC hunting.
A , since only known bad domains or hashes actually give you something concrete to search for with IOC hunting queries.
Be respectful. No spam.
