Associate an intrusion state as a condition of a scenario