EntityRiskScoreModification

Message of Entity Risk Score Modification.

JSON representation 
{
  "modification_type": enum (EntityRiskScoreModificationType),
  "modification_time": string,
  "author": string,
  "modification_reason": string,
  "multiplying_factor": number,
  "multiplying_factor_ttl": string
}
Fields
modification_type

enum (EntityRiskScoreModificationType)

Required. Modification type.
modification_time

string (Timestamp format)

Output only. Modification timestamp.

A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
author

string

Output only. The analyst id of who made the modification to base entity risk score.
modification_reason

string

Required. Modification reason.
multiplying_factor

number

Required. Multiplying factor.
multiplying_factor_ttl

string (Duration format)

Optional. TTL for the multiplying factor. Only present when modification_type is of MULTIPLY_ENTITY_RISK_SCORE_WITH_TTL type.

A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".

EntityRiskScoreModificationType

Type of Entity Risk Score Modification.

Enums
ENTITY_RISK_SCORE_MODIFICATION_TYPE_UNSPECIFIED Unspecified state for entity risk score modification type.
MULTIPLY_CURRENT_ENTITY_RISK_SCORE Multiply type for applying multiplying factor on underlying detections that contribute to base entity risk score until they fade out in the sliding risk window.
MULTIPLY_ENTITY_RISK_SCORE_WITH_TTL Multiply type for applying multiplying factor to entity risk score with a TTL.