1. A computer-implemented process for generating an advisory about an intrusion event in a computer network, comprising the steps of: a sensor monitoring data packets for a possible intrusion event; the sensor detecting an intrusion event; the sensor determining whether the detected intrusion event has a known characteristic associated with a recognized attack; a scanner identifying a target of the detected intrusion event; the scanner evaluating whether the network target is vulnerable to the detected intrusion event; the scanner assigning the detected intrusion event with a ranking based on the vulnerability of the network target, wherein the advisory has the assigned ranking associated with a low priority attack event if the evaluation fails to identify a vulnerability of the scanned network target to the detected intrusion event; and the scanner issuing the advisory having the assigned ranking.