Message for specifying an adjustment to the likelihood of a
finding as part of a detection rule.
Attributes
Name
Description
fixed_likelihood
`.storage.Likelihood`
Set the likelihood of a finding to a fixed
value.
relative_likelihood
int
Increase or decrease the likelihood by the specified number
of levels. For example, if a finding would be ``POSSIBLE``
without the detection rule and ``relative_likelihood`` is 1,
then it is upgraded to ``LIKELY``, while a value of -1 would
downgrade it to ``UNLIKELY``. Likelihood may never drop
below ``VERY_UNLIKELY`` or exceed ``VERY_LIKELY``, so
applying an adjustment of 1 followed by an adjustment of -1
when base likelihood is ``VERY_LIKELY`` will result in a
final likelihood of ``LIKELY``.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2024-12-04 UTC."],[],[]]
