How can we calculate the Risk Score?(if we want to remove it then what we need to do)

asked 17 Sep '14, 23:39

Gourav's gravatar image

Gourav
2115
accept rate: 0%


In securonix risk score depends on multiple factors like Criticality of server, Criticality of account, Criticality of policy also number of times event has been performed. We store risk of user in risk_scorecard table but you can not remove only risk score associated with user. depending on type of check we need to delete it from respective tables. like

if you want to delete risk score of user associated with policy. then you need to use following query.

delete from suspectchecksummary where checkid in (1003);

delete from risk_scorecard where typeid in (1003) ;

delete from riskscorecardhistory where typeid in (1003) ;

delete from policy_violation_details where violation_id in (188,189);

delete from policy_violation where policy_Id=3;

if you want to delete outliers then delete from access_outlier_values where risktypeid = 4; delete from access_outlier_peerdata where risktypeid = 4; delete from risk_access_user_attributes where typeid = 4;

delete from risk_access_user where typeid = 4; delete from risk_access_user_peer where typeid = 4;

delete from risk_scorecard where typeid = 4; delete from riskscorecardhistory where typeid = 4;

link

answered 18 Sep '14, 01:18

Praful's gravatar image

Praful ♦♦
1264923
accept rate: 5%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×2
×2

Asked: 17 Sep '14, 23:39

Seen: 681 times

Last updated: 18 Sep '14, 01:18