Consider assigning a higher severity to activities that can result in severely negative consequences, such as file deletion, ...

Consider assigning a higher severity to activities that can result in severely negative consequences, such as file deletion, viewing of sensitive or classified data, sharing data with external users, or other activities that can result in data loss or security threats. This can help you prioritize alerts and the actions you take to investigate and resolve the underlying causes.