{"id":477574,"date":"2023-08-09T09:17:09","date_gmt":"2023-08-09T09:17:09","guid":{"rendered":""},"modified":"2023-09-05T11:14:59","modified_gmt":"2023-09-05T11:14:59","slug":"indicators-of-compromise","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/jp\/wiki\/indicators-of-compromise\/","title":{"rendered":"\u4fb5\u5bb3\u306e\u5146\u5019"},"content":{"rendered":"<h2>\u5c0e\u5165<\/h2>\n<p>\u4fb5\u5bb3\u306e\u5146\u5019 (IoC) \u306f\u3001\u30b7\u30b9\u30c6\u30e0\u5185\u3067\u306e\u6f5c\u5728\u7684\u306a\u4fb5\u5165\u3001\u30c7\u30fc\u30bf\u4fb5\u5bb3\u3001\u307e\u305f\u306f\u9032\u884c\u4e2d\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u8105\u5a01\u3092\u793a\u3059\u30a2\u30fc\u30c6\u30a3\u30d5\u30a1\u30af\u30c8\u307e\u305f\u306f\u30d1\u30f3\u304f\u305a\u3067\u3059\u3002\u7591\u308f\u3057\u3044 IP \u30a2\u30c9\u30ec\u30b9\u3001\u7570\u5e38\u306a\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3001\u5947\u5999\u306a\u30d5\u30a1\u30a4\u30eb\u3001\u7570\u5e38\u306a\u30b7\u30b9\u30c6\u30e0\u52d5\u4f5c\u306a\u3069\u3001\u3042\u3089\u3086\u308b\u3082\u306e\u304c\u3053\u308c\u306b\u8a72\u5f53\u3057\u307e\u3059\u3002IoC \u306f\u3001\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u5c02\u9580\u5bb6\u304c\u60aa\u610f\u306e\u3042\u308b\u30a2\u30af\u30c6\u30a3\u30d3\u30c6\u30a3\u3092\u7279\u5b9a\u3057\u3001\u8105\u5a01\u3092\u65e9\u671f\u306b\u691c\u51fa\u3057\u3066\u8fc5\u901f\u306b\u5bfe\u5fdc\u3067\u304d\u308b\u3088\u3046\u306b\u3059\u308b\u306e\u306b\u5f79\u7acb\u3061\u307e\u3059\u3002<\/p>\n<h2>\u6b74\u53f2\u7684\u80cc\u666f\u3068\u6700\u521d\u306e\u8a00\u53ca<\/h2>\n<p>\u4fb5\u5bb3\u306e\u5146\u5019\u306e\u6982\u5ff5\u306f\u3001\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56\u306e\u9032\u5316\u306b\u9061\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u30cf\u30c3\u30ab\u30fc\u3084\u8105\u5a01\u306e\u4e3b\u4f53\u304c\u3088\u308a\u5de7\u5999\u306b\u306a\u308b\u306b\u3064\u308c\u3001\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u5c02\u9580\u5bb6\u304c\u958b\u767a\u3059\u308b\u5bfe\u7b56\u3082\u9032\u5316\u3057\u307e\u3057\u305f\u30022000 \u5e74\u4ee3\u534a\u3070\u9803\u3001\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u306e\u983b\u5ea6\u3068\u5f71\u97ff\u304c\u5897\u5927\u3059\u308b\u306b\u3064\u308c\u3001\u3088\u308a\u7a4d\u6975\u7684\u3067\u8a3c\u62e0\u306b\u57fa\u3065\u3044\u305f\u30a2\u30d7\u30ed\u30fc\u30c1\u306e\u5fc5\u8981\u6027\u304c\u8a8d\u8b58\u3055\u308c\u307e\u3057\u305f\u3002<\/p>\n<p>\u3053\u308c\u306b\u3088\u308a\u3001\u6f5c\u5728\u7684\u306a\u30b5\u30a4\u30d0\u30fc\u8105\u5a01\u3092\u8b58\u5225\u3059\u308b\u305f\u3081\u306e\u8a3c\u62e0\u306b\u57fa\u3065\u304f\u30de\u30fc\u30ab\u30fc\u306e\u30bb\u30c3\u30c8\u3068\u3057\u3066 IoC \u306e\u6982\u5ff5\u304c\u958b\u767a\u3055\u308c\u307e\u3057\u305f\u3002\u3053\u306e\u7528\u8a9e\u81ea\u4f53\u306f\u6b63\u78ba\u306b\u306f\u300c\u521d\u3081\u3066\u8a00\u53ca\u3055\u308c\u305f\u300d\u3082\u306e\u3067\u306f\u306a\u3044\u304b\u3082\u3057\u308c\u307e\u305b\u3093\u304c\u30012010 \u5e74\u4ee3\u3092\u901a\u3058\u3066\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u4e16\u754c\u3067\u307e\u3059\u307e\u3059\u4f7f\u7528\u3055\u308c\u308b\u3088\u3046\u306b\u306a\u308a\u3001\u73fe\u5728\u3067\u306f\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u5c02\u9580\u7528\u8a9e\u306e\u6a19\u6e96\u7684\u306a\u4e00\u90e8\u3068\u306a\u3063\u3066\u3044\u307e\u3059\u3002<\/p>\n<h2>\u4fb5\u5bb3\u306e\u5146\u5019\u306b\u95a2\u3059\u308b\u8a73\u7d30\u60c5\u5831<\/h2>\n<p>IoC \u306f\u672c\u8cea\u7684\u306b\u306f\u3001\u6f5c\u5728\u7684\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4fb5\u5bb3\u306e\u6cd5\u533b\u5b66\u7684\u8a3c\u62e0\u3067\u3059\u3002\u30b7\u30b9\u30c6\u30e0\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e 3 \u3064\u306e\u5927\u307e\u304b\u306a\u30ab\u30c6\u30b4\u30ea\u306b\u5206\u985e\u3067\u304d\u307e\u3059\u3002<\/p>\n<p><strong>\u30b7\u30b9\u30c6\u30e0 IoC<\/strong> \u4e88\u671f\u3057\u306a\u3044\u30b7\u30b9\u30c6\u30e0\u306e\u518d\u8d77\u52d5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30b5\u30fc\u30d3\u30b9\u306e\u7121\u52b9\u5316\u3001\u8a8d\u8b58\u3055\u308c\u306a\u3044\u65b0\u3057\u3044\u30e6\u30fc\u30b6\u30fc \u30a2\u30ab\u30a6\u30f3\u30c8\u306e\u5b58\u5728\u306a\u3069\u3001\u7570\u5e38\u306a\u30b7\u30b9\u30c6\u30e0\u52d5\u4f5c\u304c\u542b\u307e\u308c\u307e\u3059\u3002<\/p>\n<p><strong>\u30cd\u30c3\u30c8\u30ef\u30fc\u30af IoC<\/strong> \u591a\u304f\u306e\u5834\u5408\u3001\u30c7\u30fc\u30bf\u8ee2\u9001\u306e\u6025\u5897\u3001\u7591\u308f\u3057\u3044 IP \u30a2\u30c9\u30ec\u30b9\u3001\u307e\u305f\u306f\u8a8d\u8b58\u3055\u308c\u306a\u3044\u30c7\u30d0\u30a4\u30b9\u304c\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306b\u63a5\u7d9a\u3057\u3088\u3046\u3068\u3057\u3066\u3044\u308b\u306a\u3069\u3001\u7570\u5e38\u306a\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u307e\u305f\u306f\u63a5\u7d9a\u8a66\u884c\u304c\u4f34\u3044\u307e\u3059\u3002<\/p>\n<p><strong>\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3 IoC<\/strong> \u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u52d5\u4f5c\u306b\u95a2\u9023\u3057\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u304c\u7570\u5e38\u306a\u30ea\u30bd\u30fc\u30b9\u306b\u30a2\u30af\u30bb\u30b9\u3057\u3088\u3046\u3068\u3059\u308b\u3053\u3068\u3001\u30c8\u30e9\u30f3\u30b6\u30af\u30b7\u30e7\u30f3\u6570\u304c\u6025\u5897\u3059\u308b\u3053\u3068\u3001\u7591\u308f\u3057\u3044\u30d5\u30a1\u30a4\u30eb\u3084\u30d7\u30ed\u30bb\u30b9\u304c\u5b58\u5728\u3059\u308b\u3053\u3068\u306a\u3069\u3001\u3042\u3089\u3086\u308b\u3082\u306e\u304c\u542b\u307e\u308c\u307e\u3059\u3002<\/p>\n<p>IoC \u3092\u691c\u51fa\u3059\u308b\u3053\u3068\u3067\u3001\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u5c02\u9580\u5bb6\u306f\u3001\u91cd\u5927\u306a\u640d\u5bb3\u304c\u767a\u751f\u3059\u308b\u524d\u306b\u8105\u5a01\u3092\u8abf\u67fb\u3057\u3066\u5bfe\u5fdc\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n<h2>IoC\u306e\u5185\u90e8\u69cb\u9020\u3068\u52d5\u4f5c<\/h2>\n<p>IoC \u306e\u57fa\u672c\u69cb\u9020\u306f\u3001\u6f5c\u5728\u7684\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8105\u5a01\u306b\u95a2\u9023\u3059\u308b\u3068\u7279\u5b9a\u3055\u308c\u305f\u7279\u5b9a\u306e\u89b3\u6e2c\u53ef\u80fd\u9805\u76ee\u307e\u305f\u306f\u5c5e\u6027\u306e\u30bb\u30c3\u30c8\u3092\u4e2d\u5fc3\u306b\u5c55\u958b\u3055\u308c\u307e\u3059\u3002\u3053\u308c\u306b\u306f\u3001\u30d5\u30a1\u30a4\u30eb \u30cf\u30c3\u30b7\u30e5\u3001IP \u30a2\u30c9\u30ec\u30b9\u3001URL\u3001\u30c9\u30e1\u30a4\u30f3\u540d\u306a\u3069\u304c\u542b\u307e\u308c\u307e\u3059\u3002\u3053\u308c\u3089\u306e\u5c5e\u6027\u306e\u7d44\u307f\u5408\u308f\u305b\u306b\u3088\u3063\u3066 IoC \u304c\u4f5c\u6210\u3055\u308c\u3001\u8105\u5a01\u30cf\u30f3\u30c6\u30a3\u30f3\u30b0\u3084\u30a4\u30f3\u30b7\u30c7\u30f3\u30c8\u5bfe\u5fdc\u6d3b\u52d5\u306b\u6d3b\u7528\u3067\u304d\u307e\u3059\u3002<\/p>\n<p>IoC \u306e\u4ed5\u7d44\u307f\u306f\u3001\u4e3b\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30c4\u30fc\u30eb\u3084\u30b7\u30b9\u30c6\u30e0\u3078\u306e\u7d71\u5408\u306b\u95a2\u4fc2\u3057\u3066\u3044\u307e\u3059\u3002\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30c4\u30fc\u30eb\u306f\u3001\u3053\u308c\u3089\u306e\u6307\u6a19\u3092\u691c\u51fa\u3057\u3001\u4e00\u81f4\u304c\u898b\u3064\u304b\u3063\u305f\u5834\u5408\u306b\u81ea\u52d5\u7684\u306b\u30a2\u30e9\u30fc\u30e0\u3084\u9632\u5fa1\u7b56\u3092\u30c8\u30ea\u30ac\u30fc\u3059\u308b\u3088\u3046\u306b\u8a2d\u5b9a\u3067\u304d\u307e\u3059\u3002\u3088\u308a\u9ad8\u5ea6\u306a\u30b7\u30b9\u30c6\u30e0\u3067\u306f\u3001\u6a5f\u68b0\u5b66\u7fd2\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u3092\u4f7f\u7528\u3057\u3066\u3053\u308c\u3089\u306e IoC \u304b\u3089\u5b66\u7fd2\u3057\u3001\u65b0\u3057\u3044\u8105\u5a01\u3092\u81ea\u52d5\u7684\u306b\u8b58\u5225\u3059\u308b\u3053\u3068\u3082\u3067\u304d\u307e\u3059\u3002<\/p>\n<h2>\u4fb5\u5bb3\u306e\u5146\u5019\u306e\u4e3b\u306a\u7279\u5fb4<\/h2>\n<p>IoC \u306e\u4e3b\u306a\u6a5f\u80fd\u306f\u6b21\u306e\u3068\u304a\u308a\u3067\u3059\u3002<\/p>\n<ol>\n<li><strong>\u89b3\u6e2c\u53ef\u80fd\u9805\u76ee:<\/strong> IoC \u306f\u3001\u65e2\u77e5\u306e\u8105\u5a01\u306b\u95a2\u9023\u4ed8\u3051\u3089\u308c\u305f\u7279\u5b9a\u306e IP \u30a2\u30c9\u30ec\u30b9\u3001URL\u3001\u30d5\u30a1\u30a4\u30eb \u30cf\u30c3\u30b7\u30e5\u306a\u3069\u306e\u89b3\u5bdf\u53ef\u80fd\u306a\u7279\u6027\u306b\u57fa\u3065\u3044\u3066\u69cb\u7bc9\u3055\u308c\u307e\u3059\u3002<\/li>\n<li><strong>\u8a3c\u62e0:<\/strong> IoC \u306f\u6f5c\u5728\u7684\u306a\u8105\u5a01\u3084\u4fb5\u5bb3\u306e\u8a3c\u62e0\u3068\u3057\u3066\u4f7f\u7528\u3055\u308c\u307e\u3059\u3002<\/li>\n<li><strong>\u7a4d\u6975\u7684\uff1a<\/strong> \u3053\u308c\u3089\u306b\u3088\u308a\u3001\u30d7\u30ed\u30a2\u30af\u30c6\u30a3\u30d6\u306a\u8105\u5a01\u30cf\u30f3\u30c6\u30a3\u30f3\u30b0\u3068\u65e9\u671f\u306e\u8105\u5a01\u691c\u51fa\u304c\u53ef\u80fd\u306b\u306a\u308a\u307e\u3059\u3002<\/li>\n<li><strong>\u9069\u5fdc\u578b:<\/strong> IoC \u306f\u8105\u5a01\u306e\u5909\u5316\u306b\u5408\u308f\u305b\u3066\u9032\u5316\u3057\u3001\u65b0\u305f\u306a\u8105\u5a01\u306e\u52d5\u4f5c\u304c\u7279\u5b9a\u3055\u308c\u308b\u3068\u65b0\u3057\u3044\u6307\u6a19\u304c\u8ffd\u52a0\u3055\u308c\u307e\u3059\u3002<\/li>\n<li><strong>\u81ea\u52d5\u5fdc\u7b54:<\/strong> \u30a2\u30e9\u30fc\u30e0\u306e\u30c8\u30ea\u30ac\u30fc\u3084\u9632\u5fa1\u624b\u6bb5\u306e\u6709\u52b9\u5316\u306a\u3069\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u5fdc\u3092\u81ea\u52d5\u5316\u3059\u308b\u305f\u3081\u306b\u4f7f\u7528\u3067\u304d\u307e\u3059\u3002<\/li>\n<\/ol>\n<h2>\u4fb5\u5bb3\u306e\u5146\u5019\u306e\u7a2e\u985e<\/h2>\n<p>IoC \u306e\u7a2e\u985e\u306f\u3001\u305d\u306e\u6027\u8cea\u306b\u57fa\u3065\u3044\u3066\u30b0\u30eb\u30fc\u30d7\u5316\u3067\u304d\u307e\u3059\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>IoC\u306e\u7a2e\u985e<\/th>\n<th>\u4f8b<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u30b7\u30b9\u30c6\u30e0<\/td>\n<td>\u4e88\u671f\u3057\u306a\u3044\u30b7\u30b9\u30c6\u30e0\u306e\u518d\u8d77\u52d5\u3001\u8a8d\u8b58\u3055\u308c\u306a\u3044\u30e6\u30fc\u30b6\u30fc\u30a2\u30ab\u30a6\u30f3\u30c8\u306e\u5b58\u5728<\/td>\n<\/tr>\n<tr>\n<td>\u901a\u4fe1\u7db2<\/td>\n<td>\u7591\u308f\u3057\u3044IP\u30a2\u30c9\u30ec\u30b9\u3001\u7570\u5e38\u306a\u30c7\u30fc\u30bf\u8ee2\u9001<\/td>\n<\/tr>\n<tr>\n<td>\u5fdc\u7528<\/td>\n<td>\u7570\u5e38\u306a\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u52d5\u4f5c\u3001\u7591\u308f\u3057\u3044\u30d5\u30a1\u30a4\u30eb\u3084\u30d7\u30ed\u30bb\u30b9\u306e\u5b58\u5728<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>IoC \u306b\u95a2\u9023\u3059\u308b\u30e6\u30fc\u30b9\u30b1\u30fc\u30b9\u3001\u554f\u984c\u3001\u304a\u3088\u3073\u30bd\u30ea\u30e5\u30fc\u30b7\u30e7\u30f3<\/h2>\n<p>IoC \u306f\u4e3b\u306b\u8105\u5a01\u30cf\u30f3\u30c6\u30a3\u30f3\u30b0\u3068\u30a4\u30f3\u30b7\u30c7\u30f3\u30c8\u5bfe\u5fdc\u306b\u4f7f\u7528\u3055\u308c\u307e\u3059\u3002\u307e\u305f\u3001\u30d7\u30ed\u30a2\u30af\u30c6\u30a3\u30d6\u306a\u8105\u5a01\u691c\u51fa\u3084\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u5fdc\u306e\u81ea\u52d5\u5316\u306b\u3082\u4f7f\u7528\u3067\u304d\u307e\u3059\u3002\u305f\u3060\u3057\u3001\u3055\u307e\u3056\u307e\u306a\u8ab2\u984c\u306b\u3088\u308a\u3001\u305d\u306e\u6709\u52b9\u6027\u304c\u5236\u9650\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<p>\u3088\u304f\u3042\u308b\u8ab2\u984c\u306e 1 \u3064\u306f\u3001\u6f5c\u5728\u7684\u306a IoC \u306e\u91cf\u304c\u81a8\u5927\u3067\u3042\u308b\u3053\u3068\u3067\u3059\u3002\u3053\u306e\u305f\u3081\u3001\u30a2\u30e9\u30fc\u30e0\u75b2\u308c\u304c\u751f\u3058\u3001\u8aa4\u691c\u77e5\u3067\u5b9f\u969b\u306e\u8105\u5a01\u3092\u898b\u9003\u3059\u30ea\u30b9\u30af\u304c\u3042\u308a\u307e\u3059\u3002\u30ea\u30b9\u30af\u3068\u30b3\u30f3\u30c6\u30ad\u30b9\u30c8\u306b\u57fa\u3065\u3044\u3066 IoC \u306b\u512a\u5148\u9806\u4f4d\u3092\u4ed8\u3051\u308b\u9ad8\u5ea6\u306a\u5206\u6790\u30c4\u30fc\u30eb\u3092\u5c0e\u5165\u3059\u308b\u3053\u3068\u3067\u3001\u3053\u306e\u554f\u984c\u3092\u8efd\u6e1b\u3067\u304d\u307e\u3059\u3002<\/p>\n<p>\u3082\u3046 1 \u3064\u306e\u8ab2\u984c\u306f\u3001\u9032\u5316\u3059\u308b\u8105\u5a01\u306b\u5408\u308f\u305b\u3066 IoC \u3092\u6700\u65b0\u306e\u72b6\u614b\u306b\u4fdd\u3064\u3053\u3068\u3067\u3059\u3002\u3053\u308c\u306f\u3001\u8105\u5a01\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9 \u30d5\u30a3\u30fc\u30c9\u3092\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30b7\u30b9\u30c6\u30e0\u306b\u7d71\u5408\u3057\u3066 IoC \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u3092\u6700\u65b0\u306e\u72b6\u614b\u306b\u4fdd\u3064\u3053\u3068\u3067\u89e3\u6c7a\u3067\u304d\u307e\u3059\u3002<\/p>\n<h2>\u985e\u4f3c\u306e\u6982\u5ff5\u3068\u306e\u6bd4\u8f03<\/h2>\n<p>IoC \u306b\u4f3c\u3066\u3044\u307e\u3059\u304c\u3001\u653b\u6483\u306e\u6307\u6a19 (IoA) \u3068\u52d5\u4f5c\u306e\u6307\u6a19 (IoB) \u306f\u82e5\u5e72\u7570\u306a\u308b\u8996\u70b9\u3092\u63d0\u4f9b\u3057\u307e\u3059\u3002IoA \u306f\u3001\u653b\u6483\u8005\u304c\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5185\u3067\u5b9f\u884c\u3057\u3088\u3046\u3068\u3057\u3066\u3044\u308b\u30a2\u30af\u30b7\u30e7\u30f3\u306b\u7126\u70b9\u3092\u5f53\u3066\u307e\u3059\u304c\u3001IoB \u306f\u30e6\u30fc\u30b6\u30fc\u306e\u52d5\u4f5c\u306b\u7126\u70b9\u3092\u5f53\u3066\u3001\u8105\u5a01\u3092\u793a\u3059\u53ef\u80fd\u6027\u306e\u3042\u308b\u7570\u5e38\u3092\u63a2\u3057\u307e\u3059\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u30b3\u30f3\u30bb\u30d7\u30c8<\/th>\n<th>\u96c6\u4e2d<\/th>\n<th>\u4f7f\u7528<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>IoC<\/td>\n<td>\u65e2\u77e5\u306e\u8105\u5a01\u306e\u89b3\u5bdf\u53ef\u80fd\u306a\u7279\u5fb4<\/td>\n<td>\u8105\u5a01\u30cf\u30f3\u30c6\u30a3\u30f3\u30b0\u3001\u30a4\u30f3\u30b7\u30c7\u30f3\u30c8\u5bfe\u5fdc<\/td>\n<\/tr>\n<tr>\n<td>IoA<\/td>\n<td>\u6575\u5bfe\u884c\u70ba<\/td>\n<td>\u65e9\u671f\u8b66\u544a\u3001\u7a4d\u6975\u7684\u306a\u9632\u5fa1<\/td>\n<\/tr>\n<tr>\n<td>IoB<\/td>\n<td>\u30e6\u30fc\u30b6\u30fc\u306e\u884c\u52d5<\/td>\n<td>\u5185\u90e8\u8105\u5a01\u691c\u51fa\u3001\u7570\u5e38\u691c\u51fa<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u5c06\u6765\u306e\u5c55\u671b\u3068\u6280\u8853<\/h2>\n<p>\u6a5f\u68b0\u5b66\u7fd2\u3068\u4eba\u5de5\u77e5\u80fd\u306f\u3001IoC \u306e\u5c06\u6765\u306b\u304a\u3044\u3066\u91cd\u8981\u306a\u5f79\u5272\u3092\u679c\u305f\u3059\u3067\u3057\u3087\u3046\u3002\u3053\u308c\u3089\u306e\u30c6\u30af\u30ce\u30ed\u30b8\u30fc\u306f\u3001IoC \u306e\u691c\u51fa\u3001\u512a\u5148\u9806\u4f4d\u4ed8\u3051\u3001\u304a\u3088\u3073\u5bfe\u5fdc\u306e\u30d7\u30ed\u30bb\u30b9\u3092\u81ea\u52d5\u5316\u3059\u308b\u306e\u306b\u5f79\u7acb\u3061\u307e\u3059\u3002\u307e\u305f\u3001\u904e\u53bb\u306e\u8105\u5a01\u304b\u3089\u5b66\u7fd2\u3057\u3066\u3001\u65b0\u3057\u3044\u8105\u5a01\u3092\u4e88\u6e2c\u304a\u3088\u3073\u7279\u5b9a\u3059\u308b\u3053\u3068\u3082\u3067\u304d\u307e\u3059\u3002<\/p>\n<h2>\u30d7\u30ed\u30ad\u30b7\u30b5\u30fc\u30d0\u30fc\u3068\u4fb5\u5bb3\u306e\u5146\u5019<\/h2>\n<p>\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u3001\u3044\u304f\u3064\u304b\u306e\u65b9\u6cd5\u3067 IoC \u3068\u7d44\u307f\u5408\u308f\u305b\u3066\u4f7f\u7528\u3067\u304d\u307e\u3059\u3002\u307e\u305a\u3001\u5185\u90e8\u30b7\u30b9\u30c6\u30e0\u306e IP \u30a2\u30c9\u30ec\u30b9\u3092\u96a0\u3057\u3066\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3092\u5f37\u5316\u3057\u3001\u7279\u5b9a\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30d9\u30fc\u30b9\u306e IoC \u306e\u53ef\u80fd\u6027\u3092\u6e1b\u3089\u3059\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u6b21\u306b\u3001IoC \u691c\u51fa\u306e\u305f\u3081\u306e\u8cb4\u91cd\u306a\u30ed\u30b0 \u30c7\u30fc\u30bf \u30bd\u30fc\u30b9\u3092\u63d0\u4f9b\u3067\u304d\u307e\u3059\u3002\u6700\u5f8c\u306b\u3001\u6f5c\u5728\u7684\u306a\u8105\u5a01\u3092\u30cf\u30cb\u30fc\u30dd\u30c3\u30c8\u306b\u8ee2\u9001\u3057\u3066\u5206\u6790\u3057\u3001\u65b0\u3057\u3044 IoC \u3092\u958b\u767a\u3059\u308b\u305f\u3081\u306b\u4f7f\u7528\u3067\u304d\u307e\u3059\u3002<\/p>\n<h2>\u95a2\u9023\u30ea\u30f3\u30af<\/h2>\n<p>\u4fb5\u5bb3\u306e\u5146\u5019\u306e\u8a73\u7d30\u306b\u3064\u3044\u3066\u306f\u3001\u6b21\u306e\u30ea\u30bd\u30fc\u30b9\u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<ol>\n<li><a href=\"https:\/\/www.sans.org\/reading-room\/whitepapers\/detection\/role-indicators-compromise-attack-detection-36882\" target=\"_new\" rel=\"noopener nofollow\">\u653b\u6483\u691c\u51fa\u306b\u304a\u3051\u308b\u4fb5\u5bb3\u6307\u6a19\u306e\u5f79\u5272<\/a><\/li>\n<li><a href=\"https:\/\/www.darkreading.com\/threat-intelligence\/the-evolution-of-indicators-of-compromise\" target=\"_new\" rel=\"noopener nofollow\">\u4fb5\u5bb3\u306e\u5146\u5019\u306e\u9032\u5316<\/a><\/li>\n<li><a href=\"https:\/\/www.fireeye.com\/blog\/threat-research\/2023\/02\/cyber-threat-intelligence-and-indicators-of-compromise-in-2023.html\" target=\"_new\" rel=\"noopener nofollow\">2023 \u5e74\u306e\u30b5\u30a4\u30d0\u30fc\u8105\u5a01\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u3068\u4fb5\u5bb3\u306e\u5146\u5019<\/a><\/li>\n<\/ol>","protected":false},"featured_media":477575,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-477574","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Indicators of Compromise: An In-Depth Exploration<\/mark>","faq_items":[{"question":"What are Indicators of Compromise (IoCs)?","answer":"<p>Indicators of Compromise (IoCs) are observable characteristics or evidence that point towards a potential intrusion, data breach, or ongoing cybersecurity threat within a system. These can include anything from suspicious IP addresses to abnormal network traffic or peculiar files.<\/p>"},{"question":"How do Indicators of Compromise work?","answer":"<p>IoCs work by integrating specific observable attributes, such as IP addresses, URLs, or file hashes, into cybersecurity tools and systems. When these indicators match known attributes of threats, they trigger alarms or defensive measures, allowing for early threat detection and response.<\/p>"},{"question":"What is the difference between Indicators of Compromise (IoCs), Indicators of Attack (IoAs), and Indicators of Behavior (IoBs)?","answer":"<p>IoCs focus on observable characteristics of known threats and are used for threat hunting and incident response. IoAs concentrate on actions that adversaries attempt to execute in the network, and are used for early warnings and proactive defense. IoBs focus on user behavior, specifically looking for anomalies that might indicate a threat, such as insider threat detection.<\/p>"},{"question":"What types of Indicators of Compromise exist?","answer":"<p>Indicators of Compromise can be broadly classified into three types:<\/p><ol><li><strong>System IoCs:<\/strong> These include unusual system behaviors like unexpected reboots or unrecognized user accounts.<\/li><li><strong>Network IoCs:<\/strong> These relate to abnormal network traffic or suspicious IP addresses.<\/li><li><strong>Application IoCs:<\/strong> These encompass unusual application behavior or the presence of suspicious files or processes.<\/li><\/ol>"},{"question":"How can Indicators of Compromise be used effectively?","answer":"<p>IoCs can be effectively used for threat hunting, incident response, proactive threat detection, and automating security responses. The use of advanced analytical tools and integrating threat intelligence feeds can enhance their effectiveness by minimizing false positives and keeping IoCs up-to-date with evolving threats.<\/p>"},{"question":"What are the future perspectives and technologies related to Indicators of Compromise?","answer":"<p>The future of IoCs is likely to be greatly influenced by machine learning and artificial intelligence. These technologies can automate the process of detection, prioritization, and response to IoCs, and can learn from past threats to predict and identify new ones.<\/p>"},{"question":"How are proxy servers like OneProxy related to Indicators of Compromise?","answer":"<p>Proxy servers such as OneProxy can be used with IoCs to enhance security by obscuring internal IP addresses, providing valuable log data for IoC detection, and diverting potential threats to honeypots for analysis and the development of new IoCs.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki\/477574","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki\/477574\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/media\/477575"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/media?parent=477574"}],"curies":[{"name":"\u3046\u30fc\u3093","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}