[s]imilar cyber events or behaviors that may indicate an attack has occurred or is occurring, resulting in a security violation or a potential security violation.[1]
”
References
↑NICCS, Explore Terms: A Glossary of Common Cybersecurity Terminology (full-text).