What is the definition of an event as it applies to incident handling?
What is the definition of an event as it applies to incident handling?
An event in incident handling is defined as any observable occurrence in a system and/or network. This encompasses any activity that can be detected and observed, such as system logs, network traffic, or user actions, regardless of whether they result in a security incident or not.
Isn't D correct answer? A is definition of an event, and D is event that is categorised as incident.