ioc-tracker

What problem does it solve?

This Skill consolidates and monitors Indicators of Compromise across multiple hosts within a single investigation, enhancing visibility into adversary activity.

Core Features & Use Cases

• Indicator Collection: Tracks filenames, hashes, IP addresses, and registry paths across hosts.
• Cross-Host Correlation: Compares and promotes critical indicators between systems to identify related malicious activity.
• Use Case: An analyst finds suspicious process hashes on one machine and promotes them to the cross-host tracker to verify their presence elsewhere in the environment.

Quick Start

Use the ioc-tracker skill to add relevant artifacts from the current investigation and compare indicators across hosts to identify correlated malicious activity.