---
id: 7118
title: "Tracking cloud-fluent threat actors - Part one: Atomic cloud IOCs"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/mastering-cloud-specific-indicators-of-compromise-iocs"
published_at: "2024-09-23T15:45:17Z"
tags: ["cloud", "cloud-security", "incident-response", "threat-intelligence", "threat-hunting", "detection", "ioc"]
phying_url: "https://phying.com/item/7118"
lang: en
---

# Tracking cloud-fluent threat actors - Part one: Atomic cloud IOCs

## Summary

Part one of Wiz's series on tracking cloud-fluent threat actors explains why cloud-specific IOCs—IAM metadata, control plane API calls, container image names—are essential for detection and attribution in the cloud.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2024-09-23T15:45:17Z
- **Original:** https://www.wiz.io/blog/mastering-cloud-specific-indicators-of-compromise-iocs
- **Phying News:** https://phying.com/item/7118