How to create a Dynamic Model
To create a Dynamic Model (Rule):
- Head over to Detection Models.
- Click the "+ Create Dynamic Model" button:
![Unit21-DMB-Create-0.png 1200](https://files.readme.io/56dc611-Unit21-DMB-Create-0.png)
- Select if the model (rule) is to find a fraudulent entity or instrument:
![Screenshot 2023-02-28 at 12.41.20 PM.png 2053](https://files.readme.io/7503619-Screenshot_2023-02-28_at_12.41.20_PM.png)
- You can either select from existing templates or from scratch.
![Screenshot 2023-02-28 at 12.42.11 PM.png 2053](https://files.readme.io/a6e000d-Screenshot_2023-02-28_at_12.42.11_PM.png)
- Now you can define the logic for the Formula that will catch suspicious transactions and entities/instruments:
![Screenshot 2023-02-28 at 12.42.45 PM.png 2053](https://files.readme.io/d15b9b6-Screenshot_2023-02-28_at_12.42.45_PM.png)
To learn how to create a Formula, refer to the Variable and Trigger Condition sections.
![Screenshot 2023-02-28 at 12.43.24 PM.png 2053](https://files.readme.io/c6a0071-Screenshot_2023-02-28_at_12.43.24_PM.png)
Once you are satisfied click "Next".
- Name your model and describe it accurately.
![Screenshot 2023-02-28 at 12.44.06 PM.png 2053](https://files.readme.io/c923b34-Screenshot_2023-02-28_at_12.44.06_PM.png)
If you want the alerts to be tagged upon creation, you can select or create a tag.
- Select a time range for this rule to be validated as well as a frequency:
![Screenshot 2023-02-28 at 12.44.49 PM.png 2053](https://files.readme.io/1bd46b9-Screenshot_2023-02-28_at_12.44.49_PM.png)
Please note that some models will not require an execution interval.
A calendar breakdown for the validation time-frame will pop up.
![Screenshot 2023-02-28 at 12.45.39 PM.png 2053](https://files.readme.io/d36db52-Screenshot_2023-02-28_at_12.45.39_PM.png)
The time range was roughly 1 month and the frequency was every 2 weeks. This means the model will run on 3 windows worth of data.
When you are ready, click "Validate".
- Patiently wait with the rule is being validated against data from the selected date range.
![Unit21-DMB-Create-7.png 1200](https://files.readme.io/198d4ee-Unit21-DMB-Create-7.png)
This action is asynchronous!
If you want, you can leave this page and return later when the validation is done. You do not need to keep this window open.
If you lost your tab or closed the window, you can always find your rule in the Validating Models tab of the Detection Modeling page:
![Unit21-DMB-Create-9.png 1200](https://files.readme.io/40e820e-Unit21-DMB-Create-9.png)
- Analyze the results of the validation:
![Screenshot 2023-02-28 at 12.48.46 PM.png 2041](https://files.readme.io/476c82a-Screenshot_2023-02-28_at_12.48.46_PM.png)
The validation results will showcase any flagged transaction and generate a sample alert for your review.
If you are satisfied with the results of your model, you have three options:
- Delete the Model - This will delete the model and validation results permanently and is NOT reversible.
- Duplicate the Model - This will duplicate the model so that you can make changes to since it is NOT possible to edit a model AFTER validation.
- Activate the Model - This will launch the model live.
- When you activate a model, a pop up will appear:
![Screenshot 2023-02-28 at 12.50.55 PM.png 2041](https://files.readme.io/a01788d-Screenshot_2023-02-28_at_12.50.55_PM.png)
A this point you can:
- Optionally select shadow mode so that the rule will run but not generate alerts
- Select a start time (you can start in the past, present or future)
- Optionally elect an end time (so that the rule doesn't run forever)
- Optionally select a queue that all alerts generated by the rule will automatically go into
![Screenshot 2023-02-28 at 12.51.59 PM.png 2041](https://files.readme.io/76fa8d6-Screenshot_2023-02-28_at_12.51.59_PM.png)
Updated 8 months ago