Which two NextGen IPS event types are most beneficial in incident response? (Choose two.)