Which indicators are used to send malicious data to the target organization or individual, such as the sender's email address, email subject, and attachments or links?

Which indicators are used to send malicious data to the target organization or individual, such as the sender's email address, email subject, and attachments or links?

• A. Atomic indicators
• B. Email Indicators
• C. Network Indicators
• D. Computed indicators

Answer: (B)

Email indicators are the clues that come from the email itself and are used to recognize or block malicious messages. The examples given—sender’s email address, the subject line, and attachments or links—are all artifacts you typically analyze in spear-phishing or malware-delivery emails. By inspecting these indicators, security tools and analysts can identify suspicious campaigns, flag fraudulent messages, and block or filter them before they reach users. Atomic indicators are single data points, but they aren’t tied to a specific delivery method. Network indicators refer to artifacts found in network traffic, like IPs, domains, or URLs observed during communications. Computed indicators are derived or synthesized values from combining data. The items listed in the question are clearly tied to email content and behavior, which is why they belong to the category of email indicators.

Email indicators are the clues that come from the email itself and are used to recognize or block malicious messages. The examples given—sender’s email address, the subject line, and attachments or links—are all artifacts you typically analyze in spear-phishing or malware-delivery emails. By inspecting these indicators, security tools and analysts can identify suspicious campaigns, flag fraudulent messages, and block or filter them before they reach users.

Atomic indicators are single data points, but they aren’t tied to a specific delivery method. Network indicators refer to artifacts found in network traffic, like IPs, domains, or URLs observed during communications. Computed indicators are derived or synthesized values from combining data. The items listed in the question are clearly tied to email content and behavior, which is why they belong to the category of email indicators.