{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":44346,"path":"security-management/security-incident-response/cj-sir-ml-urp-comp.md","title":"Required components and plugins","bundle":null,"doc_type":null,"release":"australia","body":"\n# Required components and plugins\n\nTo use Predictive Intelligence for User Reported Phishing, you must install the following applications\n\n|Plugin name|Minimum version|\n|-----------|---------------|\n|Security Incident Response|9.0.1 or 10.0.2|\n|Predictive Intelligence|Orlando version|\n|Predictive Intelligence for User Reported Phishing|10.0.2|\n\n**Note:** The following new enhancements are available with Security Incident Response 10.4:\n\n-   The ability to choose close codes from custom fields for model training.\n-   The ability to explicitly activate predictions after model building.\n-   The ability to generate a final verdict on the User Reported Phishing submission using a decision table. \\(requires Security Operations Spoke 10.3.0\\)\n\nTo use the new enhancements, you must upgrade the following applications:\n\n|Plugin name|Upgrade to|\n|-----------|----------|\n|Security Incident Response|10.0.4|\n|Predictive Intelligence for User Reported Phishing|10.3.1|\n\n**New and updated tables**\n\n-   sn\\_sir\\_ml\\_urp\\_config \\(New\\): Contains the configuration for the URP ML application.\n-   sn\\_sir\\_ml\\_urp\\_feature \\(New\\): Records extracted from the sn\\_si\\_phishing email table.\n-   sn\\_sir\\_ml\\_urp\\_feature\\_import \\(New\\): Used to upload historical phishing email data.\n-   sn\\_si\\_incident \\(updated\\): The following new fields were added:\n    -   Prediction accepted\n    -   Prediction result\n    -   Confidence score\n-   **Script includes**\n    -   URPMLUtil: Retrieves configuration, run prediction job, and track prediction process.\n    -   URPMLProcessor: Extracts and processes data from the sn\\_si\\_phishing\\_email table.\n    -   URPMLAction: Executes flow to accept prediction result.\n\n"}}