Detecting App-Attack IoCs in Logs