Indicator

An indicator is an occurrence or sign that an incident may have occurred or may be in progress. Related Term: Precursor Source: CNSSI 4009, NIST SP 800-61 Rev 2 (DRAFT), …

Precursor

A precursor is an observable occurrence or sign that an attacker may be preparing to cause an incident. Related Term: Indicator Source: CNSSI 4009, NIST SP 800-61 Rev 2