[1.11] New event categorization values to support threat intel use cases (#1510)#1554

ebeahan merged 1 commit intoelastic:1.11elastic/ecs:1.11from

ebeahan:backport/1.11/pr-1510ebeahan/ecs:backport/1.11/pr-1510Copy head branch name to clipboard