Indicators of compromise (IOCs) - Administrator Guide - Cortex XDR - Cortex - Security Operations

IOCs provide the ability to alert known malicious objects on endpoints across the organization. You can load IOC lists from various threat-intelligence sources into the product or define them individually.