STIX XML Indicators of Compromise for Threat Intelligence

CISA ICS-CERT released a structured STIX XML file containing indicators of compromise for threat intelligence sharing. This XML document provides machine-readable threat indicators including malicious file hashes, IP addresses, domains, and other indicators that organizations can use to detect cyber threats. The indicators are formatted according to the STIX standard for automated consumption by security tools. For affected parties including critical infrastructure operators, industrial control system administrators, and cybersecurity teams, these IOCs enable enhanced threat detection capabilities. Organizations with security operations centers can import this data into their SIEM, EDR, or threat intelligence platforms to improve detection of ongoing or emerging threats targeting their environments.