Indicators of Attack (IOA) are behavioral patterns or activities that suggest an ongoing cyber attack.

Unlike Indicators of Compromise (IOC), IOAs focus on identifying suspicious actions or sequences of events that may lead to an attack, such as unauthorized access attempts, privilege escalation, or unusual network traffic.