What is an Opinion?

Also known as a verdict when using the API, an opinion is a human decision on an object to re-enforce or re-train Mal-Eval analysis. Opinions can be changed and are also trackable using the History tab.

• No Opinion
• Trusted
• Grayware
• Malicious

Opinions have a flexible hierarchical structure in that Stairwell's Threat Research team can set a default Opinion globally for an object that can be overridden by a customer which then applies to their specific environment(s). For example, if Stairwell sets the opinion of a file to Grayware, a customer can potentially change that to Malicious which will then be the default Opinion in their environment but no where else outside of that.