Indicators of Compromise — Types, Quality, Lifecycle, and Decay

Evaluate IOC quality across atomic/computed/behavioral types, understand indicator decay and when to retire stale indicators, and prioritize which IOCs actually belong in detection tools vs. intelligence records.