Beyond Decay Curves: Rethinking IOC Scoring
This methodology now lives at /how-we-score/ as a short, evergreen reference — this post remains the full technical deep-dive. Most security teams assume IOC scoring is a solved problem. Indicators arrive from threat feeds, confidence values are assigned, decay functions reduce scores over time, and detections are prioritized accordingly. On paper, the process appears objective […]
Beyond Decay Curves: Rethinking IOC Scoring Read More »


