Active action
Action MITRE ATT&CK
The active action is intended to record triggers in the corresponding matrix MITRE ATT&CK.
Risk Action
The active Risk Action is intended to record the risk score in the trigger.
Guidelines for Assigning Risk Scores and Confidence Levels
Guidelines for assigning risk scores and confidence levels in alerts.