Real security threat requiring immediate action
Benign activity that triggered an alert incorrectly
Ambiguous - needs senior analyst review