The custom rule event (CRE) category contains events that are generated from a custom offense, flow, or eventan event rule.
The following table describes the low-level event categories and associated severity levels for the CRE category.
Table 1: Low-level Categories and Severity Levels for the CRE Category
Low-level event category
Severity level (0 - 10)
Unknown CRE Event
Indicates an unknown custom rules engine event.
Single Event Rule Match
Indicates a single event rule match.
Event Sequence Rule Match
Indicates an event sequence rule match.
Cross-Offense Event Sequence Rule Match
Indicates a cross-offense event sequence rule match.
Offense Rule Match
Indicates an offense rule match.