You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@metron.apache.org by Otto Fowler <ot...@gmail.com> on 2017/09/22 15:58:03 UTC

question on Threat Triage Score

For the life of me, I can’t see where the actual score is set into the
rule, besides the stellar functions.
I am looking at the ThreatTriageProcessor::apply  method.

Does anyone know how the score gets set?

Re: question on Threat Triage Score

Posted by Otto Fowler <ot...@gmail.com>.

Nevermind.  Sorry.


On September 22, 2017 at 11:58:03, Otto Fowler (ottobackwards@gmail.com)
wrote:

For the life of me, I can’t see where the actual score is set into the
rule, besides the stellar functions.
I am looking at the ThreatTriageProcessor::apply  method.

Does anyone know how the score gets set?