The subtype corresponds to one (and only one) event type. Subtypes generally map closely to real world use cases and/or App Control product functionality.
Note:

You can find the event types and subtypes nested under Event Tables. Each event type has a specific table that describes the sub-types and events as they appear in this version of App Control.