The Risk Score in Trellix Insights measures the trust and reliability in detecting campaigns. It helps remove false positives by filtering and prioritizing indicators based on their risk level.
With a higher risk score, Trellix Insights allows SOC Analysts to detect high priority campaigns. This allows them to make better decisions and allocate resources effectively for analyzing unique, high priority malicious campaigns.
The Risk Score ranges from 1 to 100, representing the level of risk in campaign detection. The default score is set to 50%.
For details about product features, usage, and best practices, click ? or Help.
Log on to Trellix Insights.
Click
and select Settings.In the User Settings page, go to Events & Notification.
Set time interval (in days) for retrieving events. The default value is set to 10 days.
Set the risk score to detect high priority campaigns.
Click Update. The campaigns detected are displayed under the Requiring Attention tab based on the risk score that exceeds the defined threshold score.