Common incident indicators for cyber threats