Previous Topic: Type 4: Distributed Observed Event

Next Topic: Normalizing and Categorizing Events

Identifying the Type of Event

This section provides information on how to identify the type of event that has been expressed. The main distinguishing characteristic between the types of events are the number of hosts (network entities) expressed in the event information. Use this table to guide the determination of event type for the sample you are working with.

Number of Hosts

Type of Event

1

Type 1

2

Type 2

3

Type 3

4+

Type 4