How a raid is detected
Within one minute, enough joins and enough of them from young accounts start an incident: by default 10 joins, 60 % of them from accounts younger than 7 days. A burst of 5 young accounts within 10 seconds triggers at once. Premium servers set their own thresholds.