Indicators of Attack (IOA)
This is the page you're already on — the Human View toggle above shows it in full.
A green key on the record, left, is one Decision Insights added. It doesn't exist on the company's site or in a wire feed. The same key labels its row on the right, so you can match them directly. More on how DI enriches a record.
This is what the machine sees: the exact JSON-LD an agent receives for this listing.
{
"@context": "https://schema.org",
"@id": "https://decisioninsights.ai/#website",
"@type": "WebSite",
"name": "Decision Insights",
"potentialAction": {
"@type": "SearchAction",
"target": {
"@type": "EntryPoint",
"urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}\u0026submit=1"
}
},
"publisher": {
"@id": "https://decisioninsights.ai/#organization"
},
"url": "https://decisioninsights.ai"
}
{
"@context": "https://schema.org",
"@id": "https://decisioninsights.ai/#organization",
"@type": "Organization",
"contactPoint": {
"@type": "ContactPoint",
"contactType": "customer support",
"email": "[email protected]"
},
"description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
"logo": {
"@type": "ImageObject",
"url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
},
"name": "Decision Insights",
"parentOrganization": {
"@type": "Organization",
"name": "Wiretap Labs",
"sameAs": [
"https://www.linkedin.com/company/wiretap-labs",
"https://www.crunchbase.com/organization/wiretap-labs"
],
"url": "https://wiretaplabs.com"
},
"publishingPrinciples": "https://decisioninsights.ai/standards/",
"sameAs": [
"https://www.linkedin.com/company/decisioninsights"
],
"url": "https://decisioninsights.ai"
}
{
"@context": "https://schema.org",
"@type": "BreadcrumbList",
"itemListElement": [
{
"@type": "ListItem",
"item": "https://decisioninsights.ai",
"name": "Decision Insights",
"position": 1
},
{
"@type": "ListItem",
"item": "https://decisioninsights.ai/term/",
"name": "Glossary",
"position": 2
},
{
"@type": "ListItem",
"item": "https://decisioninsights.ai/term/indicators-of-attack-ioa/",
"name": "Indicators of Attack",
"position": 3
}
]
}
{
"@context": "https://schema.org",
"@id": "https://decisioninsights.ai/term/indicators-of-attack-ioa/#definedterm",
"@type": "DefinedTerm",
"additionalProperty": [
{
"@type": "PropertyValue",
"name": "Organizations tagged",
"value": 1
},
{
"@type": "PropertyValue",
"name": "Organizations",
"propertyID": "https://decisioninsights.ai/ns#taggedOrganizations",
"value": [
{
"@id": "https://decisioninsights.ai/registry/elastic/endgame/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/elastic/endgame/",
"name": "Endgame"
}
]
},
{
"@type": "PropertyValue",
"name": "Related terms",
"valueReference": [
{
"@id": "https://decisioninsights.ai/term/indicators-of-compromise-ioc/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/indicators-of-compromise-ioc/",
"name": "Indicators of Compromise"
},
{
"@id": "https://decisioninsights.ai/term/attack/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/attack/",
"name": "Attack"
},
{
"@id": "https://decisioninsights.ai/term/attack-vectors/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/attack-vectors/",
"name": "Attack Vectors"
},
{
"@id": "https://decisioninsights.ai/term/cyberattacks/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/cyberattacks/",
"name": "Cyberattacks"
},
{
"@id": "https://decisioninsights.ai/term/intrusion-detection-system-ids/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/intrusion-detection-system-ids/",
"name": "Intrusion Detection System"
},
{
"@id": "https://decisioninsights.ai/term/adaptive-incident-response-air/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/adaptive-incident-response-air/",
"name": "Adaptive Incident Response"
},
{
"@id": "https://decisioninsights.ai/term/threat-investigation/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/threat-investigation/",
"name": "Threat Investigation"
},
{
"@id": "https://decisioninsights.ai/term/operational-intelligence-platform-oip/#definedterm",
"@type": "DefinedTerm",
"mainEntityOfPage": "https://decisioninsights.ai/term/operational-intelligence-platform-oip/",
"name": "Operational Intelligence Platform"
}
]
}
],
"description": "Indicators of attack are behavioral and contextual signals that describe how an attack is unfolding, used by enterprises to detect and respond to intrusions earlier than traditional compromise artifacts within SOC, SIEM, EDR, and related security operations workflows.",
"inDefinedTermSet": {
"@id": "https://decisioninsights.ai/term/#termset",
"@type": "DefinedTermSet",
"url": "https://decisioninsights.ai/term/"
},
"name": "Indicators of Attack",
"termCode": "IOA",
"url": "https://decisioninsights.ai/term/indicators-of-attack-ioa/"
}
{
"@context": "https://schema.org",
"@id": "https://decisioninsights.ai/term/indicators-of-attack-ioa/",
"@type": "CollectionPage",
"dateModified": "2026-08-24T02:07:01Z",
"description": "Indicators of attack are behavioral and contextual signals that describe how an attack is unfolding, used by enterprises to detect and respond to intrusions earlier than traditional compromise artifacts within SOC, SIEM, EDR, and related security operations workflows.",
"isPartOf": {
"@id": "https://decisioninsights.ai/#website"
},
"mainEntity": {
"@id": "https://decisioninsights.ai/term/indicators-of-attack-ioa/#definedterm"
},
"name": "Indicators of Attack",
"sdDatePublished": "2026-08-24",
"sdPublisher": {
"@id": "https://decisioninsights.ai/#organization"
},
"url": "https://decisioninsights.ai/term/indicators-of-attack-ioa/"
}
Counted facts
A dictionary definition doesn't say how often a term is actually used. This counts it across the graph -- articles that mention it, open source projects tagged with it, and the organizations tagged with it, listed here alongside the count. A term has no peer companies, and nothing here claims otherwise.