Classifying Intrusion Events Into Categories