An event that modifies risk. In the risk index, risk modifiers contain the following fields at a minimum:
Risk modifiers are key to calculating risk scores and assigning risk scores to risk objects.
For more information
In Use Splunk Enterprise Security Risk-based Alerting: