Skip to content

Conversation

@natasha-moore-elastic
Copy link
Contributor

@natasha-moore-elastic natasha-moore-elastic commented Sep 4, 2025

Contributes to #2705 and #2706. Addresses customer inquiries around:

  • impact of building block alerts on entity risk scoring
  • residual risk score

Preview: Entity risk scoring

8.x PR: elastic/security-docs#7056

@github-actions
Copy link

github-actions bot commented Sep 4, 2025

🔍 Preview links for changed docs

@natasha-moore-elastic natasha-moore-elastic marked this pull request as ready for review September 4, 2025 12:37
@natasha-moore-elastic natasha-moore-elastic requested a review from a team as a code owner September 4, 2025 12:37
@natasha-moore-elastic natasha-moore-elastic self-assigned this Sep 4, 2025
### Residual risk score

In some cases, entities can retain a residual risk score:

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍 I think this is clear based on the current behavior, thank you!

@tiansivive This verbiage should allow us to very easily add another line in a future version based on the work you're currently doing, such as This behavior can be disabled via the "Retain residual risk" [or "Reset entity scores having no inputs"] toggle (name still to be determined).

Copy link
Contributor

@alaudazzi alaudazzi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@natasha-moore-elastic natasha-moore-elastic enabled auto-merge (squash) September 5, 2025 09:21
@natasha-moore-elastic natasha-moore-elastic merged commit a774eec into main Sep 5, 2025
6 of 7 checks passed
@natasha-moore-elastic natasha-moore-elastic deleted the issue-2705-2706 branch September 5, 2025 09:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants