Indicators of Compromise | FortiGuard Labs

<!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="title" property="title" content="Indicators of Compromise | FortiGuard Labs" /> <meta name="description" property="description" content="" /> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="twitter:card" property="twitter:card" content="summary" /> <meta name="twitter:title" property="twitter:title" content="Indicators of Compromise | FortiGuard Labs" /> <meta name="twitter:url" property="twitter:url" content="https://fortiguard.fortinet.com/services/ioc" /> <meta name="twitter:description" property="twitter:url" content="" /> <meta name="og:type" property="og:type" content="website" /> <meta name="og:site_name" property="og:site_name" content="FortiGuard Labs" /> <meta name="og:locale" property="og:locale" content="" /> <meta name="og:title" property="og:title" content="Indicators of Compromise | FortiGuard Labs" /> <meta name="og:url" property="og:url" content="https://fortiguard.fortinet.com/services/ioc" /> <meta name="og:description" property="og:description" content="" /> <meta name="og:image" property="og:image" content="https://filestore.fortinet.com/fortiguard/static/images/fortiguard-logo-dark-theme.svg?v=34473" /> <meta name="twitter:image" property="twitter:image" content="https://filestore.fortinet.com/fortiguard/static/images/fortiguard-logo-dark-theme.svg?v=34473" /> <link rel="shortcut icon" href="https://filestore.fortinet.com/fortiguard/static/images/favicon.ico?v=34473" type="image/x-icon" /> <title>Indicators of Compromise | FortiGuard Labs</title> <link rel="stylesheet" href="https://filestore.fortinet.com/fortiguard/static/styles/bootstrap.min.css?v=34473"> <link rel="stylesheet" href="https://filestore.fortinet.com/fortiguard/static/styles/vendor.min.css?v=34473"> <link rel="stylesheet" href="https://filestore.fortinet.com/fortiguard/static/styles/style.min.css?v=34473"> <style> /* Hacks to deal with mm-slider and bootstrap colliding with eachother */ .mm-slideout { z-index: inherit; } .modal { color: #000; } /* End Hacks */ </style>  <script async src="https://www.googletagmanager.com/gtag/js?id=G-64GHK0036C"></script> <script> window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'G-64GHK0036C'); </script> </head> <body ng-app="fgd" class="services dark-theme"> <header> <div class="ftnt-navigation d-none d-xl-block"> <div class="container-xxl"> <div class="top-toolbar"> <ul class="right-bar"> <li class="header-search-header" role="menuitem" aria-labelledby="search_field_header"> <img id="global_header_search_btn" src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/search.svg?v=34473" alt="search"> <form action="/search" method="get" class="form-check d-none"> <span class="search_flat"> <label for="search_field_header" class="visually-hidden" id="label-search_field-header">Search</label> <input id="search_field_header" type="text" class="search_field" placeholder="Search FortiGuard" name="q" required="required" autocomplete="off" aria-labelledby="label-search_field-header" value="" /> <button type="submit" value=" " class="btn btn-sm" aria-label="Submit your search"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/search.svg?v=34473" alt="search"> </button> <div class="global_search-popup"> <fieldset> <legend class="visually-hidden">Please select any available option</legend> <div class="form-check search-popup-item"> <input type="radio" name="engine" id="all_home" class="form-check-input search-input-option" value="1" checked="checked" aria-checked="true" /> <label class="form-check-label search-input-label" for="all_home"> Normal </label> </div> <div class="form-check search-popup-item"> <input type="radio" name="engine" id="exact_home" class="form-check-input search-input-option" value="2" /> <label class="form-check-label search-input-label" for="exact_home"> Exact Match </label> </div> <div class="form-check search-popup-item"> <input type="radio" name="engine" id="cve_home" class="form-check-input search-input-option" value="3" /> <label class="form-check-label search-input-label" for="cve_home"> CVE </label> </div> <div class="form-check search-popup-item"> <input type="radio" name="engine" id="threat_home" class="form-check-input search-input-option" value="4" /> <label class="form-check-label search-input-label" for="threat_home"> ID </label> </div> <div class="form-check search-popup-item"> <input type="radio" name="engine" id="psirt_home" class="form-check-input search-input-option" value="6" /> <label class="form-check-label search-input-label" for="psirt_home"> PSIRT IR </label> </div> <div class="form-check search-popup-item"> <input type="radio" name="engine" id="repms_home" class="form-check-input search-input-option" value="8" /> <label class="form-check-label search-input-label" for="repms_home"> Antispam </label> </div> <div class="form-check search-popup-item"> <input type="radio" name="engine" id="outbreak-alert_home" class="form-check-input search-input-option" value="9" /> <label class="form-check-label search-input-label" for="outbreak-alert_home"> Outbreak Alert </label> </div> <div class="form-check search-popup-item"> <input type="radio" name="engine" id="url_home" class="form-check-input search-input-option" value="7" /> <label class="form-check-label search-input-label" for="url_home"> IP/Domain/URL </label> </div> <div class="form-check search-popup-item"> <input type="radio" name="engine" id="threat-signal_home" class="form-check-input search-input-option" value="10" /> <label class="form-check-label search-input-label" for="threat-signal_home"> Threat Signal </label> </div> </fieldset> </div> </span> </form> </li> </ul> </div> </div> </div> <div id="main-nav"> <nav class="desktop-nav d-none d-xl-block" aria-label="desktop navigation menu"> <div class="container-xxl"> <div class="row"> <div class="col-xl-3 col-lg-2 logo"> <a href="/"> <img src="https://filestore.fortinet.com/fortiguard/static/images/fortiguard-logo-dark-theme.svg?v=34473" alt="fortiguard-logo" loading="lazy"> </a> </div> <div class="col-xl-7 col-lg-8 ps-0"> <ul class="main-menu-bar" role="menu" ng-controller="MenuController"> <li role="menuitem"> <a aria-haspopup="true" aria-expanded="false" aria-label="News / Research" class="main-menu" tabindex="0" id="heading-news-item">Research</a> <div class="header-hover md header-hover-news"> <div class="menu-panel dropdown-news"> <div class="container-xxl h-100 dropdown-menu-wrapper"> <div class="row h-100"> <div class="col-xl-3 col-lg-2 news-research-psirt pt-4 pe-0 services-category-wrapper"> <h2 class="text-start">Research Center</h2> </div> <div class="col-xl-7 col-lg-8 pt-4 ps-4" role="region" aria-labelledby="heading-news-item"> <div class="row"> <div class="col-md-5 research-center"> <div class="description text-start mb-3"> <span>Explore latest research and threat reports on emerging cyber threats.</span> </div> <ul class="w-100"> <li class="border-start border-3"><a href="/outbreak-alert" >Outbreak Alerts</a></li> <li class="border-start border-3"><a href="https://www.fortinet.com/blog/threat-research.html" target = _blank >Security Blog<i class='ps-2 fa fa-external-link' aria-hidden='true'></i></a></li> <li class="border-start border-3"><a href="/threat-signal-report" >Threat Signal</a></li> </ul> </div> </div> </div> </div> </div> </div> </div> </li> <li role="menuitem"> <a aria-haspopup="true" aria-expanded="false" class="main-menu" tabindex="0" id="heading-services-item">Services</a> <div class="header-hover lg header-hover-services"> <div class="menu-panel dropdown-services"> <div class="container-xxl h-100 dropdown-menu-wrapper"> <div class="row h-100"> <div class="col-xl-2 col-lg-2 services-category-wrapper pt-4 pe-0"> <h2 class="text-start">Services</h2> <button type="button" class="services-outbreak menu-category-selector" ng-click="toggleServices('outbreak')" ng-class="services['outbreak']?'active':''">By Outbreak</button> <button type="button" class="services-solution menu-category-selector" ng-click="toggleServices('solution')" ng-class="services['solution']?'active':''">By Solution</button> <button type="button" class="services-product menu-category-selector" ng-click="toggleServices('product')" ng-class="services['product']?'active':''">By Product</button> </div> <div class="col-xl-10 col-lg-10 ps-0"> <div ng-hide="!services['outbreak']" class="menu-overflow services-outbreak pt-4 ps-4"> <div role="region" aria-labelledby="heading-services-item"> <div class="row"> <div class="col"> <h3 class="mb-2 title text-uppercase border-3 border-start">Protect</h3> <div class="description text-start"><span> Counter measures across the security fabric for protecting assets, data and network. </span></div> <ul class="col-md-12 mt-3"> <li class="border-start border-3"><a href="/services/botnet" >Anti-Botnet</a></li> <li class="border-start border-3"><a href="/services/antivirus" >AntiMalware</a></li> <li class="border-start border-3"><a href="/services/antispam" >AntiSpam</a></li> <li class="border-start border-3"><a href="/services/appcontrol" >Application Control</a></li> <li class="border-start border-3"><a href="/services/ips" >Intrusion Protection</a></li> <li class="border-start border-3"><a href="/services/operational-technology-security-service" >Operational Technology Security</a></li> <li class="border-start border-3"><a href="/services/sandbox" >Sandbox Behavior Engine</a></li> <li class="border-start border-3"><a href="/services/ws" >Web Application Security</a></li> <li class="border-start border-3"><a href="/services/wf" >Web Filtering</a></li> </ul> </div> <div class="col"> <h3 class="mb-2 title text-uppercase border-3 border-start">Detect</h3> <div class="description text-start"> <span>Find and correlate important information to identify an outbreak.<span class="invisible">Find and correlate</span></span> </div> <ul class="col-md-12 mt-3"> <li class="border-start border-3"><a href="/services/arae" >Anti-Recon and Anti-Exploit</a></li> <li class="border-start border-3"><a href="/services/cloud-vulnerability-and-threat-detection" >Cloud Threat Detection</a></li> <li class="border-start border-3"><a href="/services/fedr" >Endpoint Detection & Response</a></li> <li class="border-start border-3"><a href="/services/ioc" >Indicators of Compromise</a></li> <li class="border-start border-3"><a href="/services/odcs" >Outbreak Deception</a></li> <li class="border-start border-3"><a href="/services/outbreak-detection-service" >Outbreak Detection</a></li> <li class="border-start border-3"><a href="/services/security-automation-service" >Security Automation</a></li> </ul> </div> <div class="col"> <div class="row"> <div class="col-md-12 mb-2"><h3 class="mb-2 title text-uppercase border-3 border-start"> Respond</h3> <div class="description text-start"> <span>Develop containment techniques to mitigate impacts of security events.<span class="invisible">Develop containment</span></span> </div> <ul class="col-md-12 mt-3"> <li class="border-start border-3"><a href="https://www.fortinet.com/products/fortixdr" target = _blank >Endpoint Detection and Response</a></li> <li class="border-start border-3"><a href="https://www.fortinet.com/products/endpoint-security/forticlient#support-services" target = _blank >Endpoint Forensics</a></li> <li class="border-start border-3"><a href="https://www.fortinet.com/solutions/enterprise-midsize-business/security-as-a-service/respond" target = _blank >Incident Response</a></li> </ul> </div> <div class="col-md-12"> <h3 class="mb-2 mt-4 text-uppercase title border-3 border-start">Recover</h3> <div class="description text-start"> <span>Improve security posture and processes by implementing security awareness and training.</span> </div> <ul class="col-md-12 mt-3"> <li class="border-start border-3"><a href="https://www.fortinet.com/solutions/enterprise-midsize-business/security-as-a-service/assess" target = _blank >Assessment Services</a></li> <li class="border-start border-3"><a href="https://www.fortinet.com/training/cybersecurity-professionals" target = _blank >NSE Training</a></li> <li class="border-start border-3"><a href="https://www.fortinet.com/training/security-awareness-training" target = _blank >Security Awareness Training</a></li> </ul> </div> </div> </div> <div class="col"> <h3 class="mb-2 title text-uppercase border-3 border-start">Identify</h3> <div class="description text-start"> <span>Identify processes and assets that need protection.<span class="invisible">Identify processes and assets that</span></span> </div> <ul class="col-md-12 mt-3"> <li class="border-start border-3"><a href="https://www.fortinet.com/products/fortirecon" target = _blank >Adversary Centric Intelligence</a></li> <li class="border-start border-3"><a href="https://www.fortinet.com/products/fortirecon" target = _blank >Attack Surface Management</a></li> <li class="border-start border-3"><a href="https://www.fortinet.com/products/fortirecon" target = _blank >Brand Protection</a></li> <li class="border-start border-3"><a href="/services/breach-attack-simulation" >Breach Attack Simulation</a></li> <li class="border-start border-3"><a href="/updates/casb" >Cloud Access Security</a></li> <li class="border-start border-3"><a href="/services/cloud-vulnerability-and-threat-detection" >Cloud Vulnerability</a></li> <li class="border-start border-3"><a href="/services/dynamic-application-security-testing" >DAST</a></li> <li class="border-start border-3"><a href="/services/ev" >Endpoint Vulnerability</a></li> <li class="border-start border-3"><a href="/services/fortidevsec" >FortiDevSec</a></li> <li class="border-start border-3"><a href="/services/dds" >IoT Detection</a></li> <li class="border-start border-3"><a href="/services/pentesting" >Pen Testing</a></li> <li class="border-start border-3"><a href="/services/secr" >Security Rating</a></li> </ul> </div> </div> </div> </div> <div ng-hide="!services['solution']" class="menu-overflow services-solution pt-4 ps-4"> <div role="region" aria-labelledby="heading-services-item"> <div class="row"> <div class="col"> <ul> <li> <h3 class="text-uppercase">Network Security</h3> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/network.svg?v=34473" alt="Network Security icon" loading="lazy"> </li> <li class="border-start border-3"><a href="/services/botnet" >Anti-Botnet</a></li> <li class="border-start border-3"><a href="/services/arae" >Anti-Recon and Anti-Exploit</a></li> <li class="border-start border-3"><a href="/services/dlp" >Data Loss Prevention</a></li> <li class="border-start border-3"><a href="/services/ioc" >Indicators of Compromise</a></li> <li class="border-start border-3"><a href="/services/isdb" >Internet Services</a></li> <li class="border-start border-3"><a href="/services/ips" >Intrusion Protection</a></li> <li class="border-start border-3"><a href="/services/ipge" >IP Geolocation</a></li> <li class="border-start border-3"><a href="/services/fortindr" >Network Detection and Response</a></li> <li class="border-start border-3"><a href="/services/operational-technology-security-service" >Operational Technology Security</a></li> <li class="border-start border-3"><a href="/services/sdns" >Secure DNS</a></li> <li class="border-start border-3"><a href="/services/wf" >Web Filtering</a></li> </ul> </div> <div class="col"> <ul> <li> <h3 class="text-uppercase">Endpoint Security</h3> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/contentendpoint.svg?v=34473" alt="Endpoint Security icon" loading="lazy"> </li> <li class="border-start border-3"><a href="/services/antispam" >AntiSpam</a></li> <li class="border-start border-3"><a href="/services/antivirus" >AntiVirus</a></li> <li class="border-start border-3"><a href="/services/fedr" >Endpoint Detection & Response</a></li> <li class="border-start border-3"><a href="/services/ev" >Endpoint Vulnerability</a></li> <li class="border-start border-3"><a href="/services/dds" >IoT Detection</a></li> <li class="border-start border-3"><a href="/services/sandbox" >Sandbox Behavior Engine</a></li> </ul> </div> <div class="col"> <ul> <li> <h3 class="text-uppercase">Cloud & Application Security</h3> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/cloud-application-security.svg?v=34473" alt="Cloud & Application Security icon" loading="lazy"> </li> <li class="border-start border-3"><a href="/services/appcontrol" >Application Control</a></li> <li class="border-start border-3"><a href="/services/fct-app" >Client Application Firewall</a></li> <li class="border-start border-3"><a href="/updates/casb" >Cloud Access Security</a></li> <li class="border-start border-3"><a href="/services/cloud-vulnerability-and-threat-detection" >Cloud Threat Detection</a></li> <li class="border-start border-3"><a href="/services/cloud-vulnerability-and-threat-detection" >Cloud Vulnerability</a></li> <li class="border-start border-3"><a href="/services/csd" >Credential Stuffing Defense</a></li> <li class="border-start border-3"><a href="/services/dynamic-application-security-testing" >DAST</a></li> <li class="border-start border-3"><a href="/services/ws" >Web Application Security</a></li> </ul> </div> <div class="col"> <ul> <li> <h3 class="text-uppercase">Security Operations</h3> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/response.svg?v=34473" alt="Security Operations icon" loading="lazy"> </li> <li class="border-start border-3"><a href="/services/breach-attack-simulation" >Breach Attack Simulation</a></li> <li class="border-start border-3"><a href="/services/fortidevsec" >DevSecOps</a></li> <li class="border-start border-3"><a href="/services/odcs" >Outbreak Deception</a></li> <li class="border-start border-3"><a href="/services/outbreak-detection-service" >Outbreak Detection</a></li> <li class="border-start border-3"><a href="/services/pentesting" >Pen Testing</a></li> <li class="border-start border-3"><a href="/services/security-automation-service" >Security Automation</a></li> <li class="border-start border-3"><a href="/services/secr" >Security Rating</a></li> </ul> </div> </div> </div> </div> <div ng-hide="!services['product']" class="menu-overflow services-product-wrapper"> <div class="row h-100"> <div class="col-4 products pe-0"> <ul> <li ng-click="currentProduct='0'" ng-class="{'active-product':currentProduct==='0'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortigate.svg?v=34473" alt=""/> <p class="mb-0 me-3">FortiGate</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=34473" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='1'" ng-class="{'active-product':currentProduct==='1'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortianalyzer.svg?v=34473" alt=""/> <p class="mb-0 me-3">FortiAnalyzer</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=34473" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='2'" ng-class="{'active-product':currentProduct==='2'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/forticlient.svg?v=34473" alt=""/> <p class="mb-0 me-3">FortiClient</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=34473" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='3'" ng-class="{'active-product':currentProduct==='3'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortiweb.svg?v=34473" alt=""/> <p class="mb-0 me-3">FortiWeb</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=34473" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='4'" ng-class="{'active-product':currentProduct==='4'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fadc.svg?v=34473" alt=""/> <p class="mb-0 me-3">FortiADC</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=34473" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='5'" ng-class="{'active-product':currentProduct==='5'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortiauthenticator.svg?v=34473" alt=""/> <p class="mb-0 me-3">FortiAuthenticator</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=34473" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='6'" ng-class="{'active-product':currentProduct==='6'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/cnp.svg?v=34473" alt=""/> <p class="mb-0 me-3">FortiCNP</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=34473" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='7'" ng-class="{'active-product':currentProduct==='7'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortiddos.svg?v=34473" alt=""/> <p class="mb-0 me-3">FortiDDoS</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=34473" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='8'" ng-class="{'active-product':currentProduct==='8'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortideceptor.svg?v=34473" alt=""/> <p class="mb-0 me-3">FortiDeceptor</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=34473" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='9'" ng-class="{'active-product':currentProduct==='9'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fedr.svg?v=34473" alt=""/> <p class="mb-0 me-3">FortiEDR</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=34473" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='10'" ng-class="{'active-product':currentProduct==='10'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortimail.svg?v=34473" alt=""/> <p class="mb-0 me-3">FortiMail</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=34473" alt="" class="order-0 ms-auto me-0"/></li> <li class="invisible">empty</li> </ul> </div> <div class="col-4 products pe-0 ps-0"> <ul> <li ng-click="currentProduct='11'" ng-class="{'active-product':currentProduct==='11'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortindr.svg?v=34473" alt=""/> <p class="mb-0 me-3">FortiNDR</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=34473" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='12'" ng-class="{'active-product':currentProduct==='12'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortipam.svg?v=34473" alt=""/> <p class="mb-0 me-3">FortiPAM</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=34473" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='13'" ng-class="{'active-product':currentProduct==='13'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortipolicy.svg?v=34473" alt=""/> <p class="mb-0 me-3">FortiPolicy</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=34473" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='14'" ng-class="{'active-product':currentProduct==='14'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortiproxy.svg?v=34473" alt=""/> <p class="mb-0 me-3">FortiProxy</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=34473" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='15'" ng-class="{'active-product':currentProduct==='15'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortirecon.svg?v=34473" alt=""/> <p class="mb-0 me-3">FortiRecon</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=34473" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='16'" ng-class="{'active-product':currentProduct==='16'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortisandbox.svg?v=34473" alt=""/> <p class="mb-0 me-3">FortiSandBox</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=34473" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='17'" ng-class="{'active-product':currentProduct==='17'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortisase.svg?v=34473" alt=""/> <p class="mb-0 me-3">FortiSASE</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=34473" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='18'" ng-class="{'active-product':currentProduct==='18'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortisiem.svg?v=34473" alt=""/> <p class="mb-0 me-3">FortiSIEM</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=34473" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='19'" ng-class="{'active-product':currentProduct==='19'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortitester.svg?v=34473" alt=""/> <p class="mb-0 me-3">FortiTester</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=34473" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='20'" ng-class="{'active-product':currentProduct==='20'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/fortidast.svg?v=34473" alt=""/> <p class="mb-0 me-3">FortiDAST</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=34473" alt="" class="order-0 ms-auto me-0"/></li> <li ng-click="currentProduct='21'" ng-class="{'active-product':currentProduct==='21'}" class="align-items-center user-select-none"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/cnpvuln.svg?v=34473" alt=""/> <p class="mb-0 me-3">FortiCNAPP</p> <img src="https://filestore.fortinet.com/fortiguard/static/images/arrow-white.svg?v=34473" alt="" class="order-0 ms-auto me-0"/></li> <li class="invisible">empty</li> </ul> </div> <div class="col-4 services"> <ul ng-hide="currentProduct!=='0'" class="services-list"> <li class="mb-0"><a href="/services/botnet">Anti-Botnet</a> </li> <li class="mb-0"><a href="/services/antivirus">AntiVirus</a> </li> <li class="mb-0"><a href="/services/appcontrol">Application Control</a> </li> <li class="mb-0"><a href="/updates/casb">Cloud Access Security</a> </li> <li class="mb-0"><a href="/services/ips">Intrusion Protection</a> </li> <li class="mb-0"><a href="/services/dds">IoT Detection</a> </li> <li class="mb-0"><a href="/services/ipge">IP Geolocation</a> </li> <li class="mb-0"><a href="/services/operational-technology-security-service">Operational Technology Security</a> </li> <li class="mb-0"><a href="/services/sandbox">Sandbox Behavior Engine</a> </li> <li class="mb-0"><a href="/services/sdns">Secure DNS</a> </li> <li class="mb-0"><a href="/services/secr">Security Rating</a> </li> <li class="mb-0"><a href="/services/wf">Web Filtering</a> </li> </ul> <ul ng-hide="currentProduct!=='1'" class="services-list"> <li class="mb-0"><a href="/services/ioc">Indicators of Compromise</a> </li> <li class="mb-0"><a href="/services/outbreak-detection-service">Outbreak Detection</a> </li> <li class="mb-0"><a href="/services/security-automation-service">Security Automation</a> </li> </ul> <ul ng-hide="currentProduct!=='2'" class="services-list"> <li class="mb-0"><a href="/services/botnet">Anti-Botnet</a> </li> <li class="mb-0"><a href="/services/arae">Anti-Recon and Anti-Exploit</a> </li> <li class="mb-0"><a href="/services/antivirus">AntiVirus</a> </li> <li class="mb-0"><a href="/services/fct-app">Application Firewall</a> </li> <li class="mb-0"><a href="/services/csd">Credential Stuffing Defense</a> </li> <li class="mb-0"><a href="/services/ev">Endpoint Vulnerability</a> </li> <li class="mb-0"><a href="/services/ips">Intrusion Protection</a> </li> <li class="mb-0"><a href="/services/eoap">Outbreak Detection</a> </li> <li class="mb-0"><a href="/services/sandbox">Sandbox Behavior Engine</a> </li> <li class="mb-0"><a href="/services/wf">Web Filtering</a> </li> </ul> <ul ng-hide="currentProduct!=='3'" class="services-list"> <li class="mb-0"><a href="/services/botnet">Anti-Botnet</a> </li> <li class="mb-0"><a href="/services/antivirus">AntiVirus</a> </li> <li class="mb-0"><a href="/services/appcontrol">Application Control</a> </li> <li class="mb-0"><a href="/services/csd">Credential Stuffing Defense</a> </li> <li class="mb-0"><a href="/updates/webshell">Fuzzy Webshell</a> </li> <li class="mb-0"><a href="/services/ipge">IP Geolocation</a> </li> <li class="mb-0"><a href="/services/sandbox">Sandbox Behavior Engine</a> </li> <li class="mb-0"><a href="/services/ws">Web Application Security</a> </li> </ul> <ul ng-hide="currentProduct!=='4'" class="services-list"> <li class="mb-0"><a href="/services/botnet">Anti-Botnet</a> </li> <li class="mb-0"><a href="/services/antivirus">AntiVirus</a> </li> <li class="mb-0"><a href="/services/csd">Credential Stuffing Defense</a> </li> <li class="mb-0"><a href="/services/ips">Intrusion Protection</a> </li> <li class="mb-0"><a href="/services/ipge">IP Geolocation</a> </li> <li class="mb-0"><a href="/services/sandbox">Sandbox Behavior Engine</a> </li> <li class="mb-0"><a href="/services/ws">Web Application Security</a> </li> <li class="mb-0"><a href="/services/wf">Web Filtering</a> </li> </ul> <ul ng-hide="currentProduct!=='5'" class="services-list"> <li class="mb-0"><a href="/services/ipge">IP Geolocation</a> </li> </ul> <ul ng-hide="currentProduct!=='6'" class="services-list"> <li class="mb-0"><a href="/services/botnet">Anti-Botnet</a> </li> <li class="mb-0"><a href="/services/dlp">Data Loss Prevention</a> </li> <li class="mb-0"><a href="/services/ipge">IP Geolocation</a> </li> <li class="mb-0"><a href="/services/cloud-vulnerability-and-threat-detection">Vulnerability</a> </li> </ul> <ul ng-hide="currentProduct!=='7'" class="services-list"> <li class="mb-0"><a href="/services/botnet">Anti-Botnet</a> </li> </ul> <ul ng-hide="currentProduct!=='8'" class="services-list"> <li class="mb-0"><a href="/services/arae">Anti-Recon and Anti-Exploit</a> </li> <li class="mb-0"><a href="/services/antivirus">AntiVirus</a> </li> <li class="mb-0"><a href="/services/ips">Intrusion Protection</a> </li> <li class="mb-0"><a href="/services/odcs">Outbreak Deception</a> </li> </ul> <ul ng-hide="currentProduct!=='9'" class="services-list"> <li class="mb-0"><a href="/services/antivirus">AntiVirus</a> </li> <li class="mb-0"><a href="/services/fedr">EndPoint Detection and Response</a> </li> <li class="mb-0"><a href="/services/ev">Endpoint Vulnerability</a> </li> <li class="mb-0"><a href="/services/ioc">Indicators of Compromise</a> </li> <li class="mb-0"><a href="/services/sandbox">Sandbox Behavior Engine</a> </li> <li class="mb-0"><a href="/services/wf">Web Filtering</a> </li> </ul> <ul ng-hide="currentProduct!=='10'" class="services-list"> <li class="mb-0"><a href="/services/antispam">AntiSpam</a> </li> <li class="mb-0"><a href="/services/antivirus">AntiVirus</a> </li> <li class="mb-0"><a href="/services/sandbox">Sandbox Behavior Engine</a> </li> <li class="mb-0"><a href="/services/wf">Web Filtering</a> </li> </ul> <ul ng-hide="currentProduct!=='11'" class="services-list"> <li class="mb-0"><a href="/services/fortindr">Network Detection and Response</a> </li> <li class="mb-0"><a href="/services/sandbox">Sandbox Behavior Engine</a> </li> </ul> <ul ng-hide="currentProduct!=='12'" class="services-list"> <li class="mb-0"><a href="/services/antivirus">AntiVirus</a> </li> <li class="mb-0"><a href="/services/dlp">Data Loss Prevention</a> </li> </ul> <ul ng-hide="currentProduct!=='13'" class="services-list"> <li class="mb-0"><a href="/services/botnet">Anti-Botnet</a> </li> <li class="mb-0"><a href="/services/appcontrol">Application Control</a> </li> </ul> <ul ng-hide="currentProduct!=='14'" class="services-list"> <li class="mb-0"><a href="/services/botnet">Anti-Botnet</a> </li> <li class="mb-0"><a href="/services/appcontrol">Application Control</a> </li> <li class="mb-0"><a href="/services/operational-technology-security-service">Industrial Security</a> </li> <li class="mb-0"><a href="/services/sandbox">Sandbox Behavior Engine</a> </li> </ul> <ul ng-hide="currentProduct!=='15'" class="services-list"> <li class="mb-0"><a href="https://www.fortinet.com/products/fortirecon">Digital Risk Protection</a> </li> </ul> <ul ng-hide="currentProduct!=='16'" class="services-list"> <li class="mb-0"><a href="/services/antivirus">AntiVirus</a> </li> <li class="mb-0"><a href="/services/ips">Intrusion Protection</a> </li> <li class="mb-0"><a href="/services/sandbox">Sandbox Behavior Engine</a> </li> <li class="mb-0"><a href="/services/wf">Web Filtering</a> </li> </ul> <ul ng-hide="currentProduct!=='17'" class="services-list"> <li class="mb-0"><a href="/services/botnet">Anti-Botnet</a> </li> <li class="mb-0"><a href="/services/antivirus">AntiVirus</a> </li> <li class="mb-0"><a href="/services/appcontrol">Application Control</a> </li> <li class="mb-0"><a href="/services/dlp">Data Loss Prevention</a> </li> <li class="mb-0"><a href="/services/ev">Endpoint Vulnerability</a> </li> <li class="mb-0"><a href="/services/ips">Intrusion Protection</a> </li> <li class="mb-0"><a href="/services/sandbox">Sandbox Behavior Engine</a> </li> <li class="mb-0"><a href="/services/sdns">Secure DNS</a> </li> <li class="mb-0"><a href="/services/wf">Web Filtering</a> </li> </ul> <ul ng-hide="currentProduct!=='18'" class="services-list"> <li class="mb-0"><a href="/services/ioc">Indicators of Compromise</a> </li> <li class="mb-0"><a href="/services/ipge">IP Geolocation</a> </li> <li class="mb-0"><a href="/services/fortisiem">Outbreak Detection</a> </li> <li class="mb-0"><a href="/services/sandbox">Sandbox Behavior Engine</a> </li> </ul> <ul ng-hide="currentProduct!=='19'" class="services-list"> <li class="mb-0"><a href="/services/breach-attack-simulation">Breach Attack Simulation</a> </li> </ul> <ul ng-hide="currentProduct!=='20'" class="services-list"> <li class="mb-0"><a href="/services/dynamic-application-security-testing">DAST</a> </li> </ul> <ul ng-hide="currentProduct!=='21'" class="services-list"> <li class="mb-0"><a href="/services/cloud-vulnerability-and-threat-detection">Cloud Threat Detection</a> </li> <li class="mb-0"><a href="/services/cloud-vulnerability-and-threat-detection">Cloud Vulnerability</a> </li> </ul> </div> </div> </div> </div> </div> </div> </div> </div> </li> <li role="menuitem"> <a aria-haspopup="true" aria-expanded="false" class="main-menu" tabindex="0" id="heading-threats-item">Threat Intelligence</a> <div class="header-hover sm single header-hover-threats"> <div class="menu-panel dropdown-threats"> <div class="container-xxl h-100 dropdown-menu-wrapper"> <div class="row h-100"> <div class="col-xl-3 col-lg-2 pt-4 pe-0 services-category-wrapper"> <h2 class="text-start">Threat Intelligence<br> Center</h2> </div> <div class="col-xl-7 col-lg-8 pt-4 ps-4" role="region" aria-labelledby="heading-threats-item"> <div class="row"> <div class="col-md-5 position-relative"> <div class="description text-start mb-3"> <span> Browse the FortiGuard Labs extensive encyclopedia and Threat Analytics. </span> </div> <ul class="w-100"> <li class="border-start border-3"><a href="/appcontrol" >Application Control</a></li> <li class="border-start border-3"><a href="/encyclopedia" >FortiGuard Encyclopedia</a></li> <li class="border-start border-3"><a href="/threat-map" >Outbreak Threat Map</a></li> <li class="border-start border-3"><a href="/threat-actor" >Threat Actor Encyclopedia</a></li> <li class="border-start border-3"><a href="/threat-research" >Threat Analytics</a></li> <li class="border-start border-3"><a href="/webfilter" >Web Filtering</a></li> </ul> </div> </div> <div class="col-md-6"></div> </div> </div> </div> </div> </div> </li> <li role="menuitem"> <a aria-haspopup="true" aria-expanded="false" class="main-menu" tabindex="0" id="heading-support-item">Support</a> <div class="header-hover sm single header-hover-support"> <div class="menu-panel dropdown-resources"> <div class="container-xxl h-100 dropdown-menu-wrapper"> <div class="row h-100"> <div class="col-xl-3 col-lg-2 pt-4 pe-0 services-category-wrapper"> <h2 class="text-start">Support Center</h2> <button type="button" class="support-psirt menu-category-selector" ng-click="isSupportPsirt=true" ng-class="isSupportPsirt ? 'active': ''">PSIRT Center </button> <button type="button" class="support-product menu-category-selector" ng-click="isSupportPsirt=false" ng-class="isSupportPsirt?'':'active'">Product Support </button> </div> <div class="col-xl-7 col-lg-8 pt-4 ps-4"> <div class="row"> <div class="col-md-5" role="region" aria-labelledby="heading-support-item" ng-hide="!isSupportPsirt"> <div class="description text-start mb-3"> <span> Fortinet Product Security Incident Response Team (PSIRT) updates. </span> </div> <ul class="w-100"> <li class="border-start border-3"><a href="/psirt" >Advisories</a></li> <li class="border-start border-3"><a href="https://www.fortinet.com/blog/psirt-blogs" target = _blank >PSIRT Blog</a></li> <li class="border-start border-3"><a href="/faq/psirt-contact" >PSIRT Contact</a></li> <li class="border-start border-3"><a href="/psirt_policy" >Security Vulnerability Policy</a></li> </ul> </div> <div class="col-md-5" role="region" aria-labelledby="heading-support-item" ng-hide="isSupportPsirt"> <div class="description text-start mb-3"> <span> Get the support whenever you need it. </span> </div> <ul class="w-100"> <li class="border-start border-3 d-flex align-items-center"><a href="https://www.fortinet.com/support/contact" target = _blank >FortiCare Support<i class='ps-2 fa fa-external-link' aria-hidden='true'></i></a></li> <li class="border-start border-3 d-flex align-items-center"><a href="https://community.fortinet.com/" target = _blank >Fortinet Community<i class='ps-2 fa fa-external-link' aria-hidden='true'></i></a></li> </ul> </div> </div> </div> </div> </div> </div> </div> </li> <li role="menuitem"> <a aria-haspopup="true" aria-expanded="false" class="main-menu" tabindex="0" id="heading-resources-item">Resources</a> <div class="header-hover md header-hover-resources"> <div class="menu-panel dropdown-resources"> <div class="container-xxl h-100 dropdown-menu-wrapper"> <div class="row h-100"> <div class="col-xl-3 col-lg-2 pt-4 pe-0 services-category-wrapper"> <h2 class="text-start">Resource Center</h2> </div> <div class="col-xl-7 col-lg-8 pt-4 ps-4"> <div class="row"> <div class="col-md-5 position-relative" role="region" aria-labelledby="heading-resources-item"> <div class="description text-start mb-3"> <span> Learn about service status, publications and other available resources. </span> </div> <ul class="w-100"> <li class="border-start border-3"><a href="/sample-files" >FortiGuard Sample Files</a></li> <li class="border-start border-3"><a href="/mitre-mapping" >MITRE ATT&CK Matrix</a></li> <li class="border-start border-3"><a href="/nist-csf" >NIST Cybersecurity Framework</a></li> <li class="border-start border-3"><a href="/events" >Publications</a></li> <li class="border-start border-3"><a href="/security-best-practices" >Security Best Practices</a></li> </ul> </div> <div class="col-md-5"></div> </div> </div> </div> </div> </div> </div> </li> <li class="menu-last" role="menuitem"> <a aria-haspopup="true" aria-expanded="false" class="main-menu" tabindex="0" id="heading-about-item">About</a> <div class="header-hover sm single header-hover-about"> <div class="menu-panel dropdown-aboutus"> <div class="container-xxl h-100 dropdown-menu-wrapper"> <div class="row h-100"> <div class="col-xl-3 col-lg-2 pt-4 pe-0 services-category-wrapper"> <h2 class="text-start">About</h2> <button type="button" ng-click="isAboutUs=true" class="aboutus-fortiguard menu-category-selector" ng-class="isAboutUs?'active':''">FortiGuard Labs</button> <button type="button" ng-click="isAboutUs=false" class="aboutus-partners menu-category-selector" ng-class="isAboutUs?'':'active'">Partners</button> </div> <div class="col-xl-7 col-lg-8 pt-4 ps-4" role="region" aria-labelledby="heading-news-item"> <div class="row"> <div ng-hide="!isAboutUs" class="col-md-5 position-relative"> <div class="description text-start mb-3"> <span>AI-Powered Threat Intelligence for an Evolving Digital World.</span> </div> <ul class="w-100"> <li class="border-start border-3"><a href="/contactus" >Contact Us</a></li> <li class="border-start border-3"><a href="/faq" >Frequently Asked Questions</a></li> <li class="border-start border-3"><a href="/premium-services" >Premium Services</a></li> <li class="border-start border-3"><a href="/rss-feeds" >RSS Feeds</a></li> </ul> </div> <div ng-hide="isAboutUs" class="col-md-5 position-relative"> <div class="description text-start mb-3"> <span>Leveraging cyber security industry partner relationships.</span> </div> <ul class="w-100"> <li class="border-start border-3"><a href="/cta" >Cyber Threat Alliance</a></li> <li class="border-start border-3"><a href="https://www.fortinet.com/corporate/about-us/product-certifications/mitre-att-ck" target = _blank >MITRE Engenuity</a></li> </ul> </div> </div> </div> </div> </div> </div> </div> </li> </ul> </div> <div class="col-xl-2 col-lg-3"> <ul class="float-end"> <li class="fortinet-item"> <a href="https://www.fortinet.com" target="_blank"> </a> </li> </ul> </div> </div> </div> </nav> <nav class="navbar navbar-expand-xl navbar-light d-block d-xl-none mobile-nav" aria-label="mobile navigation menu"> <div class="container-fluid p-0"> <button class="navbar-toggler ms-3 collapsed" type="button" data-bs-toggle="collapse" data-bs-target="#navbarNavDropdownMain" aria-controls="navbarNavDropdownMain" aria-expanded="false" aria-label="Toggle navigation"> <span></span> <span></span> <span></span> </button> <a class="navbar-brand" href="/"> <img src="https://filestore.fortinet.com/fortiguard/static/images/fortiguard-logo-dark-theme.svg?v=34473" alt="fortiguard-logo" loading="lazy"> </a> <img id="mobile_global_header_search_btn" src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/search.svg?v=34473" alt="search" class="me-3" width="25px"> <div class="collapse navbar-collapse" id="navbarNavDropdownMain"><ul class="navbar-nav"> <li class="nav-item"> <a class="nav-link dropdown-toggle" href="#" id="navbarScrollingDropdownNews" role="button" data-bs-toggle="dropdown" aria-expanded="false"> Research</a> <ul class="dropdown-menu" aria-labelledby="navbarScrollingDropdownNews"> <li class=""><a href="/outbreak-alert" class=dropdown-item>Outbreak Alerts</a></li> <li class=""><a href="https://www.fortinet.com/blog/threat-research.html" target = _blank class=dropdown-item>Security Blog<i class='ps-2 fa fa-external-link' aria-hidden='true'></i></a></li> <li class=""><a href="/threat-signal-report" class=dropdown-item>Threat Signal</a></li> </ul> </li> <li class="nav-item"> <a class="nav-link dropdown-toggle" href="#" id="navbarScrollingDropdownServices" role="button" data-bs-toggle="dropdown" aria-expanded="false">Services</a> <ul class="dropdown-menu" aria-labelledby="navbarScrollingDropdownServices"> <li class=""><a href="https://www.fortinet.com/products/fortirecon" target = _blank class=dropdown-item>Adversary Centric Intelligence</a></li> <li class=""><a href="/services/botnet" class=dropdown-item>Anti-Botnet</a></li> <li class=""><a href="/services/arae" class=dropdown-item>Anti-Recon and Anti-Exploit</a></li> <li class=""><a href="/services/antivirus" class=dropdown-item>AntiMalware</a></li> <li class=""><a href="/services/antispam" class=dropdown-item>AntiSpam</a></li> <li class=""><a href="/services/appcontrol" class=dropdown-item>Application Control</a></li> <li class=""><a href="https://www.fortinet.com/solutions/enterprise-midsize-business/security-as-a-service/assess" target = _blank class=dropdown-item>Assessment Services</a></li> <li class=""><a href="https://www.fortinet.com/products/fortirecon" target = _blank class=dropdown-item>Attack Surface Management</a></li> <li class=""><a href="https://www.fortinet.com/products/fortirecon" target = _blank class=dropdown-item>Brand Protection</a></li> <li class=""><a href="/services/breach-attack-simulation" class=dropdown-item>Breach Attack Simulation</a></li> <li class=""><a href="/updates/casb" class=dropdown-item>Cloud Access Security</a></li> <li class=""><a href="/services/cloud-vulnerability-and-threat-detection" class=dropdown-item>Cloud Threat Detection</a></li> <li class=""><a href="/services/cloud-vulnerability-and-threat-detection" class=dropdown-item>Cloud Vulnerability</a></li> <li class=""><a href="/services/dynamic-application-security-testing" class=dropdown-item>DAST</a></li> <li class=""><a href="/services/fedr" class=dropdown-item>Endpoint Detection & Response</a></li> <li class=""><a href="https://www.fortinet.com/products/fortixdr" target = _blank class=dropdown-item>Endpoint Detection and Response</a></li> <li class=""><a href="https://www.fortinet.com/products/endpoint-security/forticlient#support-services" target = _blank class=dropdown-item>Endpoint Forensics</a></li> <li class=""><a href="/services/ev" class=dropdown-item>Endpoint Vulnerability</a></li> <li class=""><a href="/services/fortidevsec" class=dropdown-item>FortiDevSec</a></li> <li class=""><a href="https://www.fortinet.com/solutions/enterprise-midsize-business/security-as-a-service/respond" target = _blank class=dropdown-item>Incident Response</a></li> <li class=""><a href="/services/ioc" class=dropdown-item>Indicators of Compromise</a></li> <li class=""><a href="/services/ips" class=dropdown-item>Intrusion Protection</a></li> <li class=""><a href="/services/dds" class=dropdown-item>IoT Detection</a></li> <li class=""><a href="https://www.fortinet.com/training/cybersecurity-professionals" target = _blank class=dropdown-item>NSE Training</a></li> <li class=""><a href="/services/operational-technology-security-service" class=dropdown-item>Operational Technology Security</a></li> <li class=""><a href="/services/odcs" class=dropdown-item>Outbreak Deception</a></li> <li class=""><a href="/services/outbreak-detection-service" class=dropdown-item>Outbreak Detection</a></li> <li class=""><a href="/services/pentesting" class=dropdown-item>Pen Testing</a></li> <li class=""><a href="/services/sandbox" class=dropdown-item>Sandbox Behavior Engine</a></li> <li class=""><a href="/services/security-automation-service" class=dropdown-item>Security Automation</a></li> <li class=""><a href="https://www.fortinet.com/training/security-awareness-training" target = _blank class=dropdown-item>Security Awareness Training</a></li> <li class=""><a href="/services/secr" class=dropdown-item>Security Rating</a></li> <li class=""><a href="/services/ws" class=dropdown-item>Web Application Security</a></li> <li class=""><a href="/services/wf" class=dropdown-item>Web Filtering</a></li> </ul> </li> <li class="nav-item"> <a class="nav-link dropdown-toggle" href="#" id="navbarScrollingDropdownThreatLookup" role="button" data-bs-toggle="dropdown" aria-expanded="false">Threat Intelligence</a> <ul class="dropdown-menu" aria-labelledby="navbarScrollingDropdownThreatLookup"> <li class=""><a href="/appcontrol" class=dropdown-item>Application Control</a></li> <li class=""><a href="/encyclopedia" class=dropdown-item>FortiGuard Encyclopedia</a></li> <li class=""><a href="/threat-map" class=dropdown-item>Outbreak Threat Map</a></li> <li class=""><a href="/threat-actor" class=dropdown-item>Threat Actor Encyclopedia</a></li> <li class=""><a href="/threat-research" class=dropdown-item>Threat Analytics</a></li> <li class=""><a href="/webfilter" class=dropdown-item>Web Filtering</a></li> </ul> </li> <li class="nav-item"> <a class="nav-link dropdown-toggle" href="#" id="navbarScrollingDropdownResources" role="button" data-bs-toggle="dropdown" aria-expanded="false">Resources</a> <ul class="dropdown-menu" aria-labelledby="navbarScrollingDropdownResources"> <li class=""><a href="/sample-files" class=dropdown-item>FortiGuard Sample Files</a></li> <li class=""><a href="/mitre-mapping" class=dropdown-item>MITRE ATT&CK Matrix</a></li> <li class=""><a href="/nist-csf" class=dropdown-item>NIST Cybersecurity Framework</a></li> <li class=""><a href="/events" class=dropdown-item>Publications</a></li> <li class=""><a href="/security-best-practices" class=dropdown-item>Security Best Practices</a></li> </ul> </li> <li class="nav-item support-nav-item"> <a class="nav-link dropdown-toggle" href="#" id="navbarScrollingDropdownSupport" role="button" data-bs-toggle="dropdown" aria-expanded="false">Support</a> <div class="dropdown-menu p-2 bg-black border-0 rounded-0 mt-0"> <h3 class="ps-2 text-white h6 mb-0">PSIRT Center</h3> <ul class="list-unstyled bg-black py-3" aria-labelledby="navbarScrollingDropdownSupport"> <li class=""><a href="/psirt" class=dropdown-item bg-black>Advisories</a></li> <li class=""><a href="https://www.fortinet.com/blog/psirt-blogs" target = _blank class=dropdown-item bg-black>PSIRT Blog</a></li> <li class=""><a href="/faq/psirt-contact" class=dropdown-item bg-black>PSIRT Contact</a></li> <li class=""><a href="/psirt_policy" class=dropdown-item bg-black>Security Vulnerability Policy</a></li> </ul> <h3 class="ps-2 text-white h6 mb-0">Product Support</h3> <ul class="list-unstyled bg-black py-3" aria-labelledby="navbarScrollingDropdownSupport"> <li class=""><a href="https://www.fortinet.com/support/contact" target = _blank class=dropdown-item>FortiCare Support<i class='ps-2 fa fa-external-link' aria-hidden='true'></i></a></li> <li class=""><a href="https://community.fortinet.com/" target = _blank class=dropdown-item>Fortinet Community<i class='ps-2 fa fa-external-link' aria-hidden='true'></i></a></li> </ul> </div> </li> <li class="nav-item about-nav-item"> <a class="nav-link dropdown-toggle" href="#" id="navbarScrollingDropdownAbout" role="button" data-bs-toggle="dropdown" aria-expanded="false">About</a> <div class="dropdown-menu p-2 bg-black border-0 rounded-0 mt-0"> <h3 class="ps-2 text-white h6 mb-0">FortiGuard Labs</h3> <ul class="list-unstyled bg-black py-3" aria-labelledby="navbarScrollingDropdownAbout"> <li class=""><a href="/contactus" class=dropdown-item>Contact Us</a></li> <li class=""><a href="/faq" class=dropdown-item>Frequently Asked Questions</a></li> <li class=""><a href="/premium-services" class=dropdown-item>Premium Services</a></li> <li class=""><a href="/rss-feeds" class=dropdown-item>RSS Feeds</a></li> </ul> <h3 class="ps-2 text-white h6 mb-0">Partners</h3> <ul class="list-unstyled bg-black py-3" aria-labelledby="navbarScrollingDropdownAbout"> <li class=""><a href="/cta" class=dropdown-item>Cyber Threat Alliance</a></li> <li class=""><a href="https://www.fortinet.com/corporate/about-us/product-certifications/mitre-att-ck" target = _blank class=dropdown-item>MITRE Engenuity</a></li> </ul> </div> </li> <li class="nav-item"><a href="https://fortinet.com">FORTINET</a></li> </ul></div> </div> </nav> <div class="mobile-search-bar d-xl-none d-none"> <form action="/search" method="get" class="mobile-search-form col-12 "> <div class="input-group"> <select class="form-select" name="engine" > <option value="1" > Normal </option> <option value="2" > Exact Match </option> <option value="3" > CVE </option> <option value="4" > ID </option> <option value="6" > PSIRT IR </option> <option value="8" > Antispam </option> <option value="9" > Outbreak Alert </option> <option value="7" > IP/Domain/URL </option> <option value="10" > Threat Signal </option> </select> <input id="search_field_header" type="text" class="form-control" placeholder="Search FortiGuard" name="q" required="required" autocomplete="off" aria-labelledby="label-search_field-header" value="" /> <button class="btn btn-sm btn-outline-secondary" type="submit"> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/search.svg?v=34473" alt="search"> </button> </div> </form> </div> </div> </header><main> <div class="page-content"> <div class="page-section "> <div class=" "> <div class="container-xxl"> <div class="row"> <div class="col-md-12"> </div> </div> </div> <div id="full-page" class="col-md-12"> <section class="intro" style="background: linear-gradient(rgba(0,0,0,.5), rgba(0,0,0,.5)), url('https://filestore.fortinet.com/fortiguard/static/images/services/ioc.jpg?v=34473') no-repeat left 0px top 0px;" > <div class="container-xxl"> <div class="row"> <div class="col-xxl-8 col-xl-8 col-lg-8 col-md-12"> <h1> <img src="https://filestore.fortinet.com/fortiguard/static/images/icons_white/ioc.svg?v=34473" width="70" class="pull-left" alt="virus logo" loading="lazy"/> Indicators of Compromise </h1> <p style="text-align: justify;">The FortiGuard labs collect the Indicators of Compromise (IoCs) and combine them into a package on a daily basis for delivery to Fortinet products via the FDN (Fortiguard distribution network). For example, FortiAnalyzer product can use the IOC package to alert on suspicious or infected hosts in the network.</p> </div> </div> </div> </section> <section class="extra_search bg-black" ng-controller="LearnMoreController" ng-init="init()"> <div class="container-xxl"> <div class="row justify-content-md-center"> <div class="col-xl-6 col-lg-12"> <form id="ioc_search_form" method="post" action=""> <span class="search_flat"> <input id="iocsearch" type="text" class="search_field" value="" ng-model="iocsearch" placeholder="IP / URL / Domain" name="q" required="required" autocomplete="off" /> <script src="https://recaptcha.net/recaptcha/api.js"></script> <script> document.getElementById("ioc_search_form").addEventListener("submit", function(event) { // console.log('form submitted.'); event.preventDefault(); grecaptcha.execute(); }); onCompleted = function() { // console.log('captcha completed.'); document.getElementById("ioc_search_form").submit(); } </script>  <div id="recaptcha" class="g-recaptcha" data-sitekey="6LfH36YkAAAAABsnkZCRrNd99f-6syCEZ5k8Uilk" data-callback='onCompleted' data-action='submit' data-size="invisible"></div> <button type="submit" id="ioc_search_form_submit" name="ioc_search_form_submit" class="big-blues-search" value="submit"></button> </span> </form> </div> </div> </div> </section> <section class="highlight"> <div class="container-xxl"> <div class="row justify-content-md-center text-center"> <div class="col-md-4 item"> <h3 class=""><span class="htest counter-animation" data-start="0" , data-end="500000" data-duration="1000">0</span> + </h3> <p class=""> Submitted samples are processed daily to extract IOCs</p> </div> <div class="col-md-4 item"> <h3 class=""><span class="htest counter-animation" data-start="0" , data-end="200" data-duration="1000">0</span> + </h3> <p class="">Security analysts in the FortiGuard labs tirelessly search and hunt for threats around the globe</p> </div> <div class="col-md-4 item"> <h3 class=""><span class="htest counter-animation" data-start="0" , data-end="200" data-duration="1000">0</span> + </h3> <p class="">Threat sharing agreements with Governments, Certs and Strategic vendors around the globe.</p> </div> </div> </div> </section> <section class="version bg-2"> <div class="container-xxl"> <div class="row justify-content-md-center"> <div class="col-md-12"> <div class="row"> <div class="col-md-10"> <h2>Version Updates</h2> </div> <div class="col-md-2"> </div> <div class="table-responsive "> <table class="table table-borderless table-dark"> <tbody> <tr class=""> <td class="col-md-4"> Indicators of Compromise IP Updates </td> <td class="col-md-2"> <a href="/updates/ioc?version=0.03137">0.03137</a> </td> <td class="col-md-3">in 10 months</td> <td class="col-md-3"> Added (<span class="counter-animation" data-start="0", data-end="606" data-duration="2000">0</span>) </td> </tr> <tr class=""> <td class="col-md-4"> Indicators of Compromise URL Updates </td> <td class="col-md-2"> <a href="/updates/ioc?version=0.03137">0.03137</a> </td> <td class="col-md-3">in 10 months</td> <td class="col-md-3"> Added (<span class="counter-animation" data-start="0", data-end="332" data-duration="2000">0</span>) </td> </tr> <tr class=""> <td class="col-md-4"> Indicators of Compromise Domain Updates </td> <td class="col-md-2"> <a href="/updates/ioc?version=0.03137">0.03137</a> </td> <td class="col-md-3">in 10 months</td> <td class="col-md-3"> Added (<span class="counter-animation" data-start="0", data-end="61298" data-duration="2000">0</span>) </td> </tr> </tbody> </table> </div> </div> </div> </div> </section> <section class="feature bg-black"> <div class="container-xxl"> <div class="row "> <h2>Fortiguard Labs collects indicators of compromise (IOCs) by a variety of methods. Following are some examples:</h2> <div class="col-md-4 item text-center"> <h4 class="text-center">Machine Learning</h4> <p>ML techniques are used to capture IOCs (indicators of compromise) such as malicious IP addresses, domains and urls.</p> </div> <div class="col-md-4 item text-center"> <h4 class="text-center">Global Sensors</h4> <p>Millons of sensors deployed around the globe consisting of participating customer devices, honeypots and deception decoys pick up early signals of compromise in the global cyber space.</p> </div> <div class="col-md-4 item text-center"> <h4 class="text-center">Web Crawlers</h4> <p>Fortinet propriety web crawlers armed with Artificial Intelligence crawl the Internet looking for malicious sites.</p> </div> <div class="col-md-4 item text-center"> <h4 class="text-center">Threat Exchange</h4> <p>Fortinet has 200+ threat sharing agreements with Governments, Certs and Strategic vendors around the globe.</p> </div> <div class="col-md-4 item text-center"> <h4 class="text-center">Community Submissions</h4> <p>Participating customers submit new threats to Fortinet for analysis. The submission is either manual or through Fortinet Cloud Sandbox technology. On a daily bases, FortiGuard lab executes 500,000+ malware samples to extract IOCs.</p> </div> <div class="col-md-4 item text-center"> <h4 class="text-center">Human Analysis</h4> <p>200+ Security analysts in the FortiGuard labs tirelessly search and hunt for threats around the globe</p> </div> <div class="col-md-4 item text-center"> <h4 class="text-center">Hacker Sites/Forums</h4> <p>Troll the underground/darknet to uncover zero-day threat events.</p> </div> </div> </div> </section> <section id="faq" class="faq-section"> <div class="container-xxl"> <h2>Frequently Asked Questions</h2> <div class="accordion" id="faq_accordion"> <div class="accordion-item"> <h3 class="accordion-header"> <button class="accordion-button collapsed" type="button" data-bs-toggle="collapse" data-bs-target="#collapseEnd" aria-expanded="false" aria-controls="collapseEnd"> I'm having some Indicators of Compromise issues, how do I report it? </button> </h3> <div id="collapseEnd" class="accordion-collapse collapse" data-bs-parent="#faq_accordion"> <div class="accordion-body"> <a class="link" href="/faq/ioc">Please fill out this form</a> and provide all necessary informations. </div> </div> </div> </div> </div> </section> <script> let faq = document.getElementById('faq'); let accordion_item = faq.getElementsByClassName('accordion-item'); Array.prototype.forEach.call(accordion_item, function(element, index) { element.setAttribute('id', 'faq_' + (index + 1)); }); </script> </div> </div> </div> </div> </main> <footer> <div class=container-xxl> <div class="row"> <div class="col-md-4"> <p class="footer-logo"><a href="https://www.fortinet.com" target="_blank"> <img src="https://filestore.fortinet.com/fortiguard/static/images/fortinet-footer-logo.svg?v=34473" alt="fortinet logo in the footer" loading="lazy"/> </a></p> </div> <div class="col-md-5"> <div class="bottom-nav"> <ul role="list" aria aria-label="list of links namely contact us, Legal, Privacy, faq, partners, feedback "> <li class="contact" role="listitem"> <a href="/contactus">Contact Us</a> </li> <li class="legal" role="listitem"> <a href="https://www.fortinet.com/corporate/about-us/legal.html" target="_blank">Legal</a> </li> <li class="privacy" role="listitem"> <a href="https://www.fortinet.com/corporate/about-us/privacy.html" target="_blank">Privacy</a> </li> <li class="partners" role="listitem"> <a href="/partners">Partners</a> </li> <li class="feedback" role="listitem"> <a href="/faq/general-contact">Feedback</a> </li>  </ul> </div> </div> <div class="col-md-3"> <ul class="social"> <li><a href="https://www.facebook.com/FortiGuard.Labs" target="_blank"><img src="https://filestore.fortinet.com/fortiguard/static/images/facebook_icon_footer.svg?v=34473" alt="facebook-icon-footer" loading="lazy"/></a></li> <li><a href="https://x.com/FortiGuardLabs" target="_blank"><img src="https://filestore.fortinet.com/fortiguard/static/images/x_icon_footer.svg?v=34473" alt="twitter-icon-footer" style="width:25px !important;" loading="lazy"/></a></li> <li><a href="https://www.linkedin.com/showcase/3668640/" target="_blank"><img src="https://filestore.fortinet.com/fortiguard/static/images/linkedin_icon_footer.svg?v=34473" alt="linkedin-icon-footer" loading="lazy"/></a></li> <li><a href="https://www.instagram.com/fortinet/" target="_blank"><img src="https://filestore.fortinet.com/fortiguard/static/images/instagram_icon_footer.svg?v=34473" alt="linkedin-icon-footer" loading="lazy"/></a></li> <li><a href="/rss-feeds"><img src="https://filestore.fortinet.com/fortiguard/static/images/rss_icon_footer.svg?v=34473" alt="rss-icon-footer" loading="lazy"/></a></li> </ul> </div> </div> <div class="row"> <div class="col-md-12"> <p>Copyright 漏 2025 Fortinet, Inc. All Rights Reserved.</p> </div> </div> </div> </footer> <script src="https://filestore.fortinet.com/fortiguard/static/scripts/vendor.min.js?v=34473"></script> <script rel="prefetch" as="script" src="https://filestore.fortinet.com/fortiguard/static/scripts/app.min.js?v=34473"></script> <script rel="prefetch" as="script" src="https://filestore.fortinet.com/fortiguard/static/scripts/script.min.js?v=34473"></script> <script rel="prefetch" as="script" src="https://filestore.fortinet.com/fortiguard/static/scripts/bundle.min.js?v=34473"></script> <script> </script> <script src="https://filestore.fortinet.com/scripts/privacy-v2.min.js?c=77754563" async></script> <div class="modal fade" id="fgdAlertModal" tabindex="-1" role="dialog" aria-labelledby="fgdAlertModalLabel"> <div class="modal-dialog" role="document"> <div class="modal-content"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">×</span></button> <h4 class="modal-title" id="fgdAlertModalLabel"></h4> </div> <div class="modal-body"> <div>test</div> </div> <div class="modal-footer"> <button type="button" class="btn btn-default" data-dismiss="modal">Close</button> </div> </div> </div> </div> </body> </html>

CINXE.COM

Indicators of Compromise | FortiGuard Labs