pub struct Risk { /* private fields */ }
Expand description
Fields for describing risk score and risk level of entities such as hosts and users. These fields are not allowed to be nested under event.*
. Please continue to use event.risk_score
and event.risk_score_norm
for event risk.
Implementations§
Source§impl Risk
impl Risk
Sourcepub fn get_calculated_score(&self) -> Option<&f64>
pub fn get_calculated_score(&self) -> Option<&f64>
A risk classification score calculated by an internal system as part of entity analytics and entity risk scoring.
Sourcepub fn set_calculated_score(&mut self, calculated_score_arg: f64)
pub fn set_calculated_score(&mut self, calculated_score_arg: f64)
A risk classification score calculated by an internal system as part of entity analytics and entity risk scoring.
§Example
880.73
Sourcepub fn get_calculated_score_norm(&self) -> Option<&f64>
pub fn get_calculated_score_norm(&self) -> Option<&f64>
A risk classification score calculated by an internal system as part of entity analytics and entity risk scoring, and normalized to a range of 0 to 100.
Sourcepub fn set_calculated_score_norm(&mut self, calculated_score_norm_arg: f64)
pub fn set_calculated_score_norm(&mut self, calculated_score_norm_arg: f64)
A risk classification score calculated by an internal system as part of entity analytics and entity risk scoring, and normalized to a range of 0 to 100.
§Example
88.73
Sourcepub fn get_static_score(&self) -> Option<&f64>
pub fn get_static_score(&self) -> Option<&f64>
A risk classification score obtained from outside the system, such as from some external Threat Intelligence Platform.
Sourcepub fn set_static_score(&mut self, static_score_arg: f64)
pub fn set_static_score(&mut self, static_score_arg: f64)
A risk classification score obtained from outside the system, such as from some external Threat Intelligence Platform.
§Example
830.0
Sourcepub fn get_static_score_norm(&self) -> Option<&f64>
pub fn get_static_score_norm(&self) -> Option<&f64>
A risk classification score obtained from outside the system, such as from some external Threat Intelligence Platform, and normalized to a range of 0 to 100.
Sourcepub fn set_static_score_norm(&mut self, static_score_norm_arg: f64)
pub fn set_static_score_norm(&mut self, static_score_norm_arg: f64)
A risk classification score obtained from outside the system, such as from some external Threat Intelligence Platform, and normalized to a range of 0 to 100.
§Example
83.0
Sourcepub fn get_calculated_level(&self) -> Option<&String>
pub fn get_calculated_level(&self) -> Option<&String>
A risk classification level calculated by an internal system as part of entity analytics and entity risk scoring.
Sourcepub fn set_calculated_level(&mut self, calculated_level_arg: String)
pub fn set_calculated_level(&mut self, calculated_level_arg: String)
A risk classification level calculated by an internal system as part of entity analytics and entity risk scoring.
§Example
High
Sourcepub fn get_static_level(&self) -> Option<&String>
pub fn get_static_level(&self) -> Option<&String>
A risk classification level obtained from outside the system, such as from some external Threat Intelligence Platform.
Sourcepub fn set_static_level(&mut self, static_level_arg: String)
pub fn set_static_level(&mut self, static_level_arg: String)
A risk classification level obtained from outside the system, such as from some external Threat Intelligence Platform.
§Example
High