A pattern of relevant observable adversary activity in the operational cyber domain.
Sources:
CNSSI 4009-2022
A technical artifact or observable that suggests an attack is imminent or is currently underway, or that a compromise may have already occurred.
Sources:
NIST SP 800-150
under Indicator