Beyond Decay Curves: Rethinking IOC Scoring
This methodology now lives at /how-we-score/ as a short, evergreen reference — this post remains the full technical deep-dive. Most security teams assume IOC scoring is a solved problem. Indicators arrive from threat feeds, confidence values are assigned, decay functions reduce scores over time, and detections are prioritized accordingly. On paper, the process appears objective
Beyond Decay Curves: Rethinking IOC Scoring Read More »


