The severity assigned is based on the likelihood and impact of the indicators of compromise discovered in the investigation.