OpenIOC.org has several schemas defining Indicators of Compromise. The Schema is defined here:
IndicatorItemContext/search says it is
xs:string, the actual list of search terms is listed here:
Is there something similar for
So far I'm only aware of
"is" but there doesn't seem to be a definitive list.