An exemplary embodiment of the present invention provides a method of processing network activity data. The method includes receiving network activity data and generating an event based on the network activity data. The method also includes generating a probability based at least in part on Bayesian statistics, the probability corresponding to a likelihood that the event caused or was caused by another event. The method also includes generating an event message corresponding to the event based on the probability.