commonfields:
  id: MaliciousRatioReputation
  version: -1
name: MaliciousRatioReputation
fromversion: "6.5.0"
script: ''
type: python
subtype: python3
tags:
- reputation
comment: |-
  Set indicator reputation to "suspicious" when malicious ratio is above threshold.
  Malicious ratio is the ration between number of "bad" incidents to total number of incidents the indicator appears in.
enabled: true
args:
- name: input
  description: Value of the indicator.
- name: threshold
  description: 'Malicious ratio threshold to set indicator as suspicious. '
  defaultValue: "0.3"
scripttarget: 0
dockerimage: demisto/python3:3.12.13.10404775
tests:
- No tests (auto formatted)