For this question refer to your textbook.

Which of the following is NOT a characteristic of an indicator of compromise $($IOC$)?$

Question $23$ options:

Formatted in different ways to be digested by various detection mechanisms

Used in a platform$-$specific language or format to become a signature

Expressed in a platform$-$independent manner

Describes a network intrusion in a complex manner

Contains one or more IOCs