Indicator
Noun · Security & Infosec
Definitions
A specific observable sign associated with suspicious or malicious activity, such as an IP address, domain, file hash, mutex, or process path. Indicators are useful for detection and hunting, but on their own they do not always explain attacker intent or scope.
In plain English: A clue or observable sign that may point to malicious activity.
Example: "The suspicious domain was only one indicator, so the team hunted for related process and credential activity too."