Indicator Scoring
Default ThreatQ Role: Administrative, Maintenance, or Primary Contributor
Custom Role - Action Permissions: Individual Object Context & Actions - Score
Indicator scoring allows you to apply weighting to indicators and their contextual information, such as sources, attributes, and indicator types, as they are added to ThreatQ. Indicator scoring allows you to set manual scores or rely on ThreatQ’s scoring algorithm to calculate scores. After scores are calculated, you can change the score to your custom value or accept the calculated value.
Building a Scoring Algorithm
You can build a scoring algorithm that automatically assigns an indicator score based on user-designed criteria. See the Scoring Algorithms topic for further details.
Setting a Manual Indicator Score
You can use this process to override an individual indicators score set by the scoring algorithm.
- Navigate to an Indicator's Details page.
- Click the Score dropdown and select a score.
Optionally, you may revert to the calculated score by clicking on the Score dropdown and selecting Generated Score.
