Understanding Indicators of Compromise (IR108)

CISA is proud to offer the cybersecurity awareness webinar, Understanding Indicators of Compromise (IR108), on Thursday, October 19, 2023, from 11 a.m. to noon EDT.  We are excited to share this information with stakeholders across the federal enterprise and nationally. 

This webinar is intended for a non-technical audience and beginning incident responders. 

Indicators of Compromise (IOCs) are the digital and informational "clues" that incident responders use to detect, diagnose, halt, and remediate malicious activity in their networks. This webinar provides an overview of IOCs for incident responders and those who work with them, introduces example scenarios and how IOCs can be used to trace activity and piece together a timeline of the threat, and discusses tools and frameworks to help incident responders use IOCs to detect, analyze, respond to, and report cyber threat activity. 

This webinar includes the following information and more: 

• Importance of IOCs: Define IOCs and why tracking, investigating, and reporting IOCs are crucial to enterprise cybersecurity. Students will understand how IOCs are used for threat hunting and incident response, different types of indicators, and how to collect different categories of IOCs. 

• Frameworks: Students will learn about the Cyber Kill Chain® and MITRE ATT&CK® Framework and how they support the analysis of IOCs. 

• Knowledge checks: The course provides knowledge checks throughout the presentation to reinforce key concepts and takeaways. 

Event Logistics:  

• Date: Thursday, October 19, 2023 

• Time: 11 a.m. - noon EDT 

• Location: Online via WebEx 

• CPE Credit: Participants can earn 1 CPE credit for attending this course. 

• Note: Audio is through WebEx; there is no external dial-in. Closed captioning (English only) will be available during this training event. Previously recorded webinars are available on the CISA YouTube channel for playback in other languages, if required.  

If you require a reasonable accommodation to fully participate in this virtual event, please contact [email protected] at least five business days prior to the training with the type of support you need.