An IOC (Indicator of Compromise) is the actual evidence that proves a network has been breached. An IOC is identified as part of an investigation into suspicious activity or attempted security hacks. IOC data is analyzed and used to help detect and prevent future cyber attacks.