10. The apparatus of claim 7 wherein the ordered list comprises, for each of the one or more new events, a first classification indicator specifying the riskiness of the new event utilizing the learning set and a second classification indicator specifying the riskiness of the new event without utilizing the learning set.
10. The apparatus of claim 7 wherein the ordered list comprises, for each of the one or more new events, a first classification indicator specifying the riskiness of the new event utilizing the learning set and a second classification indicator specifying the riskiness of the new event without utilizing the learning set. 17. The apparatus of claim 10 wherein the ordered list further comprises, for each of the one or more new events, at least a subset of the metadata associated with new event including a policy associated with the product causing generation of the new event at its corresponding event generator in the information technology infrastructure.