EntityRiskScoreModification

Message of Entity Risk Score Modification.

JSON representation

JSON representation
{ "modification_type": enum (`EntityRiskScoreModificationType`), "modification_time": string, "author": string, "modification_reason": string, "multiplying_factor": number, "multiplying_factor_ttl": string }

{
  "modification_type": enum (EntityRiskScoreModificationType),
  "modification_time": string,
  "author": string,
  "modification_reason": string,
  "multiplying_factor": number,
  "multiplying_factor_ttl": string
}

Fields
`modification_type`	`enum (EntityRiskScoreModificationType)` Required. Modification type.
`modification_time`	`string (Timestamp format)` Output only. Modification timestamp. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: `"2014-10-02T15:01:23Z"` and `"2014-10-02T15:01:23.045123456Z"`.
`author`	`string` Output only. The analyst id of who made the modification to base entity risk score.
`modification_reason`	`string` Required. Modification reason.
`multiplying_factor`	`number` Required. Multiplying factor.
`multiplying_factor_ttl`	`string (Duration format)` Optional. TTL for the multiplying factor. Only present when modification_type is of MULTIPLY_ENTITY_RISK_SCORE_WITH_TTL type. A duration in seconds with up to nine fractional digits, ending with '`s`'. Example: `"3.5s"`.

EntityRiskScoreModificationType

Type of Entity Risk Score Modification.

Enums
`ENTITY_RISK_SCORE_MODIFICATION_TYPE_UNSPECIFIED`	Unspecified state for entity risk score modification type.
`MULTIPLY_CURRENT_ENTITY_RISK_SCORE`	Multiply type for applying multiplying factor on underlying detections that contribute to base entity risk score until they fade out in the sliding risk window.
`MULTIPLY_ENTITY_RISK_SCORE_WITH_TTL`	Multiply type for applying multiplying factor to entity risk score with a TTL.