You are a cyber security analyst responsible for reviewing alerts that come from the organization's SIEM. Which of the following would be considered an IOC?

A Network traffic between an internal host and an external IP address known to be malicious

B

Unexpected compressed files found on a system

Unexpected service running on a web server

All of the above