Kind of change the suggestion makes to the rule.
Optional additionalA container for additional, undeclared properties. This is a holder for any undeclared properties as specified with the 'additionalProperties' keyword in the OAS document.
The conditions the change applies to.
What the suggestion changes.
Optional estimatedEstimated number of signals the change would have silenced in the window.
ID of the suggestion.
How the conditions combine, such as AND or OR.
Whether the suggestion is recommended.
ID of the detection rule.
Title of the suggestion.
What the change could hide. It can be empty.
Why the suggestion is made.
Generated using TypeDoc
A suggestion to tune the detection rule.