Relationships need evidence
Nexus can connect qualifying observations without pretending that every event belongs to the same attacker or incident.
Severity and impact remain distinct
A relationship, a threat level and an observed outcome answer different questions. Keep those distinctions when assessing the evidence.