An incident trigger is an event signaling the possibility of a cyber threat. When incident triggers are generated, an incident responder must be aware that an attack is in process.