Associate an intrusion state with the triggers of a scenario