rba
rba copied to clipboard
[Issue]: Risk Notable Analysis Dashboard always reports the same `threat_object type` for all Threat Objects
Description
This was raised by John Norton on the Outpost Security RBA Slack channel. See screenshot.
This comes from using tstats on two related MV fields that have to be joined in order.
Issue, illustrated. From the drilldown panel in the dashboard, once you click on a rule to see details...
I've tested a potential fix and will raise a PR for it.
Would give the following results, as an example: