2013-06-13 Using IOC (Indicators of Compromise) in Malware sec Forensics http://www.sans.org/reading_room/whitepapers/incident/ioc-indicators-compromise-malware-forensics_34200