Host Artifacts or Traces
Host artifacts are the traces or observables that attackers leave on the system, such as registry values, suspicious process execution, attack patterns or IOCs (Indicators of Compromise), files dropped by malicious applications, or anything exclusive to the current threat.
Ex: Suspicious process execution from Word
Ex: The files modified/dropped by the malicious actor:
Ex: Suspicious events followed by opening a malicious application:
