Assertion: incident | /r/HasProperty | detected
Facets:
Source sentences:
text: Once an incident is detected or identified, containing it is a top priority.
text: The main purpose of containment is to contain the damage and prevent further damage from occurring (as noted in step number two, the earlier incidents are detected, the sooner they can be contained to minimize damage).
text: - Incidents are detected and reported.
text: When an incident is detected, team members need to work to identify the nature of the attack, its source, and the goals of the attacker.
text: Once incidents have been detected, you need to determine false positives, classify the attack vector, understand the scope of the event, and identify the vulnerabilities being exploited.
text: The incident was detected when the <type of alert> was triggered and <team or person paged> were paged.