Skip to content

ML-HostRiskScore-20210728-1

Pre-release
Pre-release
Compare
Choose a tag to compare
@brokensound77 brokensound77 released this 28 Jul 18:56
· 1475 commits to main since this release
7040538

for details, reference: https://github.com/elastic/detection-rules/tree/main/docs/experimental-machine-learning


Changelog

This is the first release package for Host Risk Score. It consists of the following:

  • Scripts, ingest pipelines and transforms used to calculate and update risk score across all hosts in your environment
  • dashboards.ndjson contains all the assets required for two dashboards- "Current Risky Hosts", which shows the Top 20 currently suspicious hosts in your environment and "Host Risk Drilldown" which shows a more detailed breakdown of various types of activity taking place on hosts in your environment