Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

THREAT 371: Slack Anomaly Detection Tuning #1334

Merged
merged 3 commits into from
Aug 27, 2024

Conversation

ben-githubs
Copy link
Contributor

Background

Customers have complained that the current default severity of CRITICAL is overkill for many of the anomalies that are raised.

Changes

  • Changed the default deverity to LOW
  • Added a dynamic severity function to increase severity to MEDIUM for specific anomaly types (see here for a list of anomaly types)
  • Added a unit test to confirm that severity is upgraded for session_fingerprint anomaly
  • Minor format changes to YAML

Testing

  • make test and make lint

Click here to see the issue in Jira.

@ben-githubs ben-githubs requested a review from a team as a code owner August 21, 2024 20:52
Copy link

😱
looks like some things could be wrong with the packs

[INFO][root]: ignoring file dependabot.yml

@arielkr256 arielkr256 enabled auto-merge August 27, 2024 14:52
@arielkr256 arielkr256 merged commit d5a2b43 into release Aug 27, 2024
6 checks passed
@arielkr256 arielkr256 deleted the THREAT-371/slack-anomaly-detection-tuning branch August 27, 2024 14:53
@arielkr256 arielkr256 added the tuning detection tuning label Sep 4, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
tuning detection tuning
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants