Which of the following statements are true regarding an IoA or can be an example of an IoA? Select three.

a$.$

A user is not able to log into their account a day before their password expires.

b$.$

An IoA is a sign an attack is currently in progress.

c$.$

A user checks email while in Europe and downloads a file as if in Australia within $6$ minutes.

d$.$

An IoA includes the log files used to analyze how a security breach was successful.

e$.$

An IoA is evidence an attack occurred.