Indicators and network defense

Incident response
1

I found this article interesting. What are your thoughts?
Do you use IoCs? Do they help you with your work? Do you they ever give a false sense of security?