Outline indicators that may warrant an incident to be investigated but may be common within an organization depending on one’s interpretation:
Presence of unfamiliar files
Presence or execution of unknown programs or processes
Unusual consumption of computing resources
Unusual system crashes
Give examples of each of the possible indicators outlined in the text to enhance the meeting and purpose of each one in a real-world environment.