Christian Cloutier comments

Results 4 comments of


                                            Christian Cloutier

Fix for issue #124

@L0ranCyb Yes, I noticed this. The values repeat for each RBA detection, so I *think* this can safely be disregarded as we're keeping only unique values later in the SPL....

[Issue]: Risk Attribution (Investigative View) Errors

Same goes for the related [issue](https://github.com/splunk/rba/issues/106) I opened.

[Issue]: Risk Notable Analysis Dashboard always reports the same `threat_object type` for all Threat Objects

Issue, illustrated. From the drilldown panel in the dashboard, once you click on a rule to see details... ![image](https://github.com/splunk/rba/assets/58239192/2ac1f009-ee93-4ba0-afef-476916ed8806)

[Issue]: Risk Notable Analysis Dashboard always reports the same `threat_object type` for all Threat Objects

I've tested a potential fix and will raise a PR for it. Would give the following results, as an example: ![image](https://github.com/splunk/rba/assets/58239192/d43fc6d9-4135-41a3-887b-6f0eaac4bc5f)