I frequently see devices listed in "Indications of Compromise by Host" When i drill down to see what the issue is, it's usually "The host may connect to a phishing URL" or "Malware Site" When i drill down further to the events that triggered the IOC,...