# \[IMPROVEMENT REQUEST\] Add risk score field to each rule in Endgame

**URL:** <https://discuss.elastic.co/t/improvement-request-add-risk-score-field-to-each-rule-in-endgame/250125>\
**Category:** Endpoint Security\
**Created:** [September 28, 2020, 5:10am UTC](https://discuss.elastic.co/t/improvement-request-add-risk-score-field-to-each-rule-in-endgame/250125 "2020-09-28T05:10:49Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![kdawg](https://avatars.discourse-cdn.com/v4/letter/k/e19b73/32.png) [@kdawg](https://discuss.elastic.co/u/kdawg)\
**Post date:** [September 28, 2020, 5:10am UTC](https://discuss.elastic.co/t/improvement-request-add-risk-score-field-to-each-rule-in-endgame/250125/1 "2020-09-28T05:10:49Z")

</div>

**Feature request**

**Describe the feature:** Add a field to Endgame rules to include a risk score to show when the rule is triggered, this will assist with prioritizing these alerts.

**Description of the problem:**  
When many different types of alerts appear it is difficult to prioritise which to look at first or to easily identify if they that signal is a critical risk.  
The alerts should have this identifier to assist analysts in identifying which rules could be the most likely to detect malicious behaviors.

**Additional Notes:**  
This risk score should also have a column in the lists for Threats and Adversary Behaviors so that it can be sorted by this number.  
This would be similar to the risk score for the SIEM signals.

---

<div class="post-metadata">

**Author:** ![bradenpreston](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bradenpreston/32/56729_2.png) [@bradenpreston](https://discuss.elastic.co/u/bradenpreston)\
**Post date:** [September 28, 2020, 7:06pm UTC](https://discuss.elastic.co/t/improvement-request-add-risk-score-field-to-each-rule-in-endgame/250125/2 "2020-09-28T19:06:18Z")

</div>

@kdawg - thank you for the feature request and additional information. We appreciate you using Endgame. We have logged the enhancement request.

Today we offer the ability to set the severity (high, medium, or low.) Adding a risk score would be a nice enhancement.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 26, 2020, 7:06pm UTC](https://discuss.elastic.co/t/improvement-request-add-risk-score-field-to-each-rule-in-endgame/250125/3 "2020-10-26T19:06:22Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.