I am wondering if there is any benefit to creating my own set of correlation classes as opposed to just using the ones built in. It seems you can only have one of four pre-defined types anyway (Security, Host, Network, Storage). I am just not even sure why this functionality exists.
If you have done anything interesting or useful with correlation classes I would certainly like to hear about it! Thank you!