We've received frequent emails from our Threat Intelligence Group with IoCs artifacts, such as file names, hashes, domains/urls. They request us to do preventive measures for the given attributes.
However, I find it very hard to follow their request. Should I block all given IOCs? If so, it is very time-consuming and not effective when it comes to security.
I think that some risk assessments need to be carried out to ascertain whether such IOCs artifacts expose any risk to and also their impact on our environment before applying any applicable preventive measure.
Updated: The IoCs are related to coronavirus and are sent on alternate days or even almost on a daily basis without any relevant risk assessment. Moreover, when I take a look at the actors, they targeted a specific European country, while our entity is located in Asia Pacific. This leads to an apparent mismatch or redundant efforts from our side