Determine the difference between normal activity and an incident

This exercise is part of the course

Detect, Respond, and Recover from Cloud Cybersecurity Attacks