All of the following are considered Indicators of Compromise $($IOC$)$ except:

All of the following are considered Indicators of Compromise $($IOC$)$ except:

Suspicious registry or system file changes

Unusual DNS requests

Geographical irregularities in network traffic

Large documents being printed