1. A method of organizing security data comprising hierarchically relating a triggering security event with at least one additional security event based on a possible relationship between the triggering security event and the at least one additional security event in a computer database environment.