A/V avoidance is pitifully easy. Even when you know what to look for, most compromise indicators come out well after infections have occurred. IOCAware is a new approach in collecting compromise intelligence (IOCs) in near-real-time. That intelligence is then tested across your enterprise – again, in near-real-time. These indicators incorporate attacker behavior that may not be tied to a binary. IOCAware also provides tools for managing your IOCs as well as positive hits for indicators across your enterprise. But that’s just your enterprise. We are also creating an entire infrastructure for compromise indicator collection and anonymous sharing.