RSA Admin

Correlation Classes - What's the point?

Discussion created by RSA Admin Employee on May 9, 2012
Latest reply on May 10, 2012 by RSA Admin

I am wondering if there is any benefit to creating my own set of correlation classes as opposed to just using the ones built in. It seems you can only have one of four pre-defined types anyway (Security, Host, Network, Storage). I am just not even sure why this functionality exists.

If you have done anything interesting or useful with correlation classes I would certainly like to hear about it! Thank you!