These are often summarized by
SNOOP-type red flags: systemic illness, neurologic deficit, sudden onset, older age at onset, and pattern change/positional or pressure-related features. A normal-looking headache can still be secondary, so the neurologic examination and fundoscopy matter.
AAFP red-flag review and
acute headache approach outline these warning features.