threats / manual

the user explicitly selects threats, and sets the valuation when needed (this is the default behaviour in PILAR before version 4.4)

threats / automatic

the system selects and applies the standard valuation

threats / mix

Something between manual and automatic. By default, threats are identified and valued automatically using the TSV file. However, some assets or threats may be marked as manual. PILAR recalculates automatic values as needed but respects manual ones.

Analysis >> Threats >> valuation