IoCs are pieces of evidence, like specific malware signatures or IP addresses, that suggest a potential security breach.