Ranks indicators by how much it costs an adversary to change them: hash values, addresses, domain names, network and host artifacts, tools, and tradecraft at the top.
Use
Deciding which indicators are worth building a case or a detection on.
Limit
A ranking of cost, not of truth. A high-level match still needs corroboration.