MaliciousRatioReputation
This Script is part of the Common Scripts Pack.#
Supported versions
Supported Cortex XSOAR versions: 6.5.0 and later.
Sets the indicators reputation to "suspicious" when the malicious ratio is above the threshold. The malicious ratio is the ration between the number of "bad" incidents to the total number of incidents the indicator appears in.
Script Data#
| Name | Description |
|---|---|
| Script Type | python |
| Tags | reputation |
| Cortex XSOAR Version | 4.0.0+ |
Inputs#
| Argument Name | Description |
|---|---|
| input | The value of the indicator. |
| threshold | The malicious ratio threshold to set the indicator as suspicious. |
Outputs#
There are no outputs for this script.