Indicators of Attack (IOA) are behavioral patterns or activities that suggest an ongoing cyber attack is active.