RS — Rescore All Articles
When the user says rs, run both rescore commands. Do not commit or push; this is data-only.
Commands (in order)
Keyword/regex hunt scores —
threat_hunting_scorein article metadata:./run_cli.sh rescore --forceML hunt scores —
ml_hunt_scorefrom chunk-level model predictions:./run_cli.sh rescore-ml --force
When to use
- After changing scoring rules (keyword rescore).
- After retraining the ML model or changing aggregation (rescore-ml).
- To backfill or refresh all article scores.
Optional scope
- Single article:
./run_cli.sh rescore --article-id ID --forceand./run_cli.sh rescore-ml --article-id ID --force. - Dry run: add
--dry-runto either command to preview without writing.
Out of scope
- No
git add/ commit / push (use lg for that).
Converted and distributed by TomeVault — claim your Tome and manage your conversions.