Appendix E: Event severity level by category

Event Category	NDR Detection Severity Level
Malware Detection	Low|Medium|High|Critical
Botnet Detection/Netflow Botnet Detection	Critical
Encryption Attack Detection	Critical
Network Attack Detection	Low|Medium|High|Critical
Indication of Compromise Detection	Critical
Weak Cipher and Vulnerable Protocol Detection	Low|Medium|High|Critical
Machine Learning Detection	Low|Medium|High|Critical