ML-HostRiskScore-20210728-1
Pre-release
Pre-release
·
1475 commits
to main
since this release
for details, reference: https://github.com/elastic/detection-rules/tree/main/docs/experimental-machine-learning
Changelog
This is the first release package for Host Risk Score. It consists of the following:
- Scripts, ingest pipelines and transforms used to calculate and update risk score across all hosts in your environment
dashboards.ndjson
contains all the assets required for two dashboards- "Current Risky Hosts", which shows the Top 20 currently suspicious hosts in your environment and "Host Risk Drilldown" which shows a more detailed breakdown of various types of activity taking place on hosts in your environment