Threat detection refers to the identification of potential security threats. Such can include an activity that may be an indication of compromise in a device, application, network, or identity. While incident response refers to the steps that are undertaken by the security team and automated tools to contain and eliminate the cyberthreat.