What has to be in a NIS2 early warning?

Under Article 23(4)(a), the early warning indicates, where applicable, whether the significant incident is suspected of being caused by unlawful or malicious acts and whether it could have a cross-border impact. The details follow in the 72-hour notification.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.