Widgets in Scenario Pipelines

Depending on the pipeline type, specific widgets are available in the widgets pane.

The following table describes these widgets and the sequence in which the widgets can be placed from start to end in a scenario pipeline.

Table 5-1 Scenario Pipeline – Widgets and Descriptions

Sequence Widget Name Description Precedence Additional Information
1 High Level Dataset widget High Level Dataset (HLD) Use this widget to add a High Level Dataset. Essentially, this is the data that is used to detect unusual or suspicious behavior. N/A A scenario pipeline must always begin with an HLD widget.
2 Episode widget Episode Use this widget to add an Episode. Episodes allow you to generate events which meet specific criteria. For example, if the sum of consecutive transactions fall under the specified range, it is considered an episode. If the number of episodes crosses specified number of thresholds, an event will be generated. 1 An episode is not mandatory in a scenario pipeline.
3 Risk Indicator widget Risk Indicator Use this widget to add a Risk Indicator. Risk indicators help determine the overall risk of transactions and parties and aid users working with events. 1  
4 Segment widget Segment Use this widget to add a Segment. Segments allow you to set different values for meeting evaluations based on specified attributes. Using segments helps generate events based on applying different values to risk indicators and evaluations. 3 A segment is not mandatory in a scenario pipeline, but a scenario pipeline can contain multiple segments that can either be connected in a sequential or parallel manner.
5 Evaluation widget Evaluation Use this widget to add an Evaluation. Evaluations are used to define conditions for the measures that are defined in the risk indicator. Evaluations perform logical comparisons against these conditions to generate events 3,4  
6 Create Event widget Create Event Use this widget to create an Event. An event is a record of one or more pattern matches in a detection run, which is a signal for further investigation. 5 A scenario pipeline must always end with a Create Event widget.