# \#threat\_intel

**URL:** https://community.emergingthreats.net/tag/threat-intel/56.md

[Latest](https://community.emergingthreats.net/latest.md) · [Categories](https://community.emergingthreats.net/categories.md) · [Tags](https://community.emergingthreats.net/tags.md)

---

## [Introduction to IOC Pivoting, and the Pyramid of Pain](https://community.emergingthreats.net/t/introduction-to-ioc-pivoting-and-the-pyramid-of-pain/2566)

<div class="topic-metadata">

**Author:** [@trobinson667](https://community.emergingthreats.net/u/trobinson667)\
**Replies:** 0\
**Last updated:** [March 25, 2025, 3:52pm UTC](https://community.emergingthreats.net/t/introduction-to-ioc-pivoting-and-the-pyramid-of-pain/2566 "2025-03-25T15:52:40Z")

</div>

Couple of days ago, my boss introduced me to this great blog post by sekoia.io, about the PolarEdge botnet. I love tearing apart research to make (hopefully) good IDS sigs for finding future exploit attempts, and/or ret…