Observables : scoring/rating #57
Description
Please replace every line in curly brackets { like this } with appropriate answers, and remove this line.
Problem to Solve
We use it for selecting observable at SOC level.
Some observables correspond to legitimate IP addresses, domain names, etc. Their use in consuming devices will generate false positive.
Some observables might be 'malicious' for sometimes.
The rating/scoring will indicate 'how malicious' a give observable is.
Current Workaround
N/A
Proposed Solution
Scoring/rating: numerical value associated to each observable.
Range: [0-100]
(0: non malicious)
(100: malicious)
The logic to calculate or set the rating can be different depending on the organisation.
It should be subject to a separate 'issue'
Additional Information
N/A