Which category includes examples like sender's email address and attachments used in email communications?

Which category includes examples like sender's email address and attachments used in email communications?

• A. Email Indicators
• B. Atomic indicators
• C. Network Indicators
• D. Host-Based Indicators

Answer: (A)

When evaluating security signals, focus on artifacts that come directly from the item being examined. For email, the things you can observe within the message itself—such as who sent it (the sender's email address) and what is attached (attachments)—are indicators specific to email. They help determine if an email is legitimate, spoofed, or carrying malware, and they’re the kinds of observable features that email security tools and analysts flag during filtering and investigations. This category is distinct from network indicators, which relate to traffic patterns and external communications, and from host-based indicators, which pertain to artifacts on a device after a compromise. Atomic indicators isn’t a standard label for this context, so the best fit for these email-specific artifacts is email indicators.

When evaluating security signals, focus on artifacts that come directly from the item being examined. For email, the things you can observe within the message itself—such as who sent it (the sender's email address) and what is attached (attachments)—are indicators specific to email. They help determine if an email is legitimate, spoofed, or carrying malware, and they’re the kinds of observable features that email security tools and analysts flag during filtering and investigations. This category is distinct from network indicators, which relate to traffic patterns and external communications, and from host-based indicators, which pertain to artifacts on a device after a compromise. Atomic indicators isn’t a standard label for this context, so the best fit for these email-specific artifacts is email indicators.