Software Downloads

IOC Editor

  • Free editor for IOCs.

    Mandiant’s IOC Editor is a free editor for Indicators of Compromise (IOCs). IOCs are XML documents that help incident responders capture diverse information about threats including attributes of malicious files, characteristics of registry changes, artifacts in memory, and so on. IOCe provides an interface into managing data within these IOCs including:

    • Manipulating the logical structures that define the IOC
    • Applying meta-information to IOCs including detailed descriptions or arbitrary labels
    • Converting IOCs into XPath filters
    • Managing lists of “Terms” that are used within IOCs



    Want more information about Mandiant’s IOC Editor? Check out our User Forums.



    Release Notes: Mandiant IOC Editor (PDF)

    User Guide: Mandiant IOC Editor (PDF)

    Current Version: IOC Editor 2.2
    Release Date: December 4, 2012

    Supported Operating Systems: Windows XP, Windows Vista, Windows 7 (32-bit and 64-bit)

    File Size: 2.12 MB

    Integrity Hashes:

    ZIP
      MD5: 40075157b7a65bba45122ced2ff33aae
      SHA-1: aff95f0fa83c7b07cbe4130bbef92bd11a82b9a0

    Extracted
      MD5: 537A73357FC55565591C39F54EB20173
      SHA-1: 68A0323F16BC85EC0A77A208B740EC8B9ACE4F52

    Download IOC Editor