EMR Effects, Mechanisms, and Resources values

EMR values provide security classification data that applies to each event type. The default processing rule uses the EMR values to determine how an event should be processed.