Ability to map alerts to different Type / Sub-Type / Item depending on what the alert is for.
E.g. If the alert has come from EDR vs MDR for 365