Glossary: Security Operations and Incident Response

IoC (indicator of compromise)

Also written: indicators, indicator of compromise

A piece of evidence that an attack happened, such as a known bad file hash, a connection to a bad address, or an administrator account nobody created.