elastic / elastic/roadmap

Dynamic Alert Risk Score

Open
#162 0 comments 0 reactions 0 assignees View on GitHub
product-area:security
Dominant language
No language data
Stars
6
Forks
1
PR merge metrics
No merged PRs in 30d

Description

**Background**
Currently, the alert risk score is a static attribute assigned to the rule, similar to a severity (critical, high, medium, low), but a number vs a keyword to enable sorting for those users that customize the score.

**Value proposition**

We will provide Dynamic Risk Score that accounts for all the Entities within an alert as well as other activities for alert prioritization. This will allow for Alert Prioritization logic based on Entity scores within the alert as well as other activities helping additional layers of triage.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.