Incident detection Precursors indicate that incident may occur in future and Incident
detection Indicators give information that incident might have occurred or is
happening now.
A simple example of a precursor might be contents of the web server log showing
usage of vulnerability scanner. And a simple example of an indicator might be
antivirus software alert.
