IOCs act as flags that cybersecurity professionals use to detect unusual activity that is evidence of or can lead to a future attack.