MaliciousRatioReputation
Sets the indicators reputation to "suspicious" when the malicious ratio is above the threshold. The malicious ratio is the ration between the number of "bad" incidents to the total number of incidents the indicator appears in.
Script Data
| Name | Description |
|---|---|
| Script Type | python |
| Tags | reputation |
| Demisto Version | 4.0.0+ |
Inputs
| Argument Name | Description |
|---|---|
| input | The value of the indicator. |
| threshold | The malicious ratio threshold to set the indicator as suspicious. |
Outputs
There are no outputs for this script.