Yes, they are also events with a base class metadata object that can follow the same pattern. E.g. a SIEM that creates findings may have enough knowledge and state to tie multiple findings together with a metadata.correlation_uid.
Yes, they are also events with a base class metadata object that can follow the same pattern. E.g. a SIEM that creates findings may have enough knowledge and state to tie multiple findings together with a metadata.correlation_uid.