ArcSightCategorizationWhitePaper.pdf

This document describes ArcSight event categorization from a technical perspective.  It is meant for anyone who needs to understand ArcSight's categorization schema.