Mandiant® - Detect. Respond. Contain.

Software Downloads

IOC Editor

  • Free editor for IOCs.

    Mandiant IOC Editor is a free editor for Indicators of Compromise (IOCs). IOCs are XML documents that help incident responders capture diverse information about threats including attributes of malicious files, characteristics of registry changes, artifacts in memory, and so on. IOCe provides an interface into managing data within these IOCs including:

    • Manipulating the logical structures that define the IOC
    • Applying meta-information to IOCs including detailed descriptions or arbitrary labels
    • Converting IOCs into XPath filters
    • Managing lists of “Terms” that are used within IOCs



    Want more information about Mandiant IOC Editor? Check out our User Forums.



    Current Version: IOC Editor 2.1.1
    Release Date: October 31, 2011

    Supported Operating Systems: Windows XP, Windows Vista, Windows 7 (32-bit and 64-bit)

    File Size: 1.98 MB

    Integrity Hashes:

      MD5: cce947888ef48988828982feceabef7c
      SHA-1: 07f7ef1c6b125a5f573c29c7885c33e3e40079de

    Download IOC Editor