Mandiant IOC Editor

Mandiant IOC Editor is a free editor for Indicators of Compromise (IOCs). IOCs are XML documents that help incident responders capture diverse information about threats including attributes of malicious files, characteristics of registry changes, and artifacts in memory. IOCe provides an interface into managing data within these IOCs including: manipulating the logical structures that define the IOC, applying meta-information to IOCs including detailed descriptions or arbitrary labels, converting IOCs into XPath filters, and managing lists of "Terms" that are used within IOCs.