indicator of compromise (IOC)

Also written: IOC, IOCs, indicator, indicators

Evidence that an attack may have happened or is happening, such as a log line, a new process or a strange connection. It is a clue, not proof.