When investigating, what is the best way to store a newly-found IOC?
A) Paste it into Notepad.
B) Click the "Add IOC" button.
C) Click the "Add Artifact" button.
D) Add it in a text note to the investigation.

Question

Quizplus · Accepted Answer

The "Add IOC" button is specifically designed for storing Indicators of Compromise (IOCs) in a structured and organized manner, ensuring they are easily accessible and usable for future reference and analysis.

When Investigating, What Is the Best Way to Store a Newly-Found