A precursor is a signal that something bad is about to happen (Van Impe, Koen).
This is predicated on public data like vendor advisories and security blogs, as well
as threat intelligence sources and the detection of attacker reconnaissance activity
(Van Impe, Koen). Security professionals can use precursors to predict a potential
attack and strengthen security measures accordingly (Van Impe, Koen).
"
On the other hand, an indicator indicates that an incident has occurred or is
currently occurring (Van Impe, Koen). Security solution warnings, suspicious
behaviour noticed in logs, or reports from people inside or outside the company
