Glossary
IOA
Indicator of Attack — A behavioral signal that an attack is actively in progress, such as a process attempting to disable security tools or an unusual sequence of privilege escalation steps, as opposed to a static artifact left behind afterward. IOAs are intended to detect attacker intent and technique in real time, complementing indicators of compromise.