risk modifier

risk modifier

noun

An event that modifies risk. In the risk index, risk modifiers contain the following fields at a minimum: risk score, risk_object, and risk_object_type.

Risk modifiers are key to calculating risk scores and assigning risk scores to risk objects.

For more information

In Use Splunk Enterprise Security Risk-based Alerting:

• How risk modifiers impact risk scores in Splunk Enterprise Security