It involves preventing a network service from functioning normally

it requires that network administrators look through network logs to determine what caused a cyber attack

It refers to actively searching for the clues that typically precede an attack in an effort to prevent the crime from taking place