Appendix E - Event severity level by category

Event Category	NDR Detection Severity Level
Botnet Detection	Critical
Encryption Attack Detection	Critical
Network Attack Detection	Low|Medium|High|Critical
Indication of Compromise Detection	Critical
Weak Cipher and Vulnerable Protocol Detection	Low|Medium|High|Critical
Malware Detection	Low