Week 9 Discussion Post 20

Inthesimplesttermsordefinition,aprecursorisasignthatanincidentmayoccurinthefuture

andanindicatorisasignthatanincidentmayhaveoccurredormaybeoccurringnow.Oneexample

ofaprecursorcouldbe,athreatfromagroupstatingthatthegroupwillattacktheorganization.

Oneexampleofaindicatorswouldbeyourantivirussoftwarealertswhenitdetectsthatahostis

infectedwithmalware.Thechallengewithbothdetectiontypesisitsaccuracyhowever,some

incidentsareeasytodetect,suchasanobviouslydefacedwebpage.However,manyincidentsare