You observe several distinct, low-severity suspicious activities associated with a single internal server. You determine that no single event is a high-confiden...