def get_defender_action_and_severity(self, indicator):
        """To convert sentinel confidence value to defender action."""
        __method_name = inspect.currentframe().f_code.co_name
        try:
            confidence = indicator.get("properties", {}).get("confidence", "")
            actions = None
            severity = None
            if (
                confidence is None
                or confidence == ""
                or int(confidence) == 0
                or (
                    int(confidence) >= consts.THREAT_LEVEL_BENIGN
                    and int(confidence) <= consts.THREAT_LEVEL_INTERMEDIATE
                )
            ):
                actions = "Allowed"
                severity = "Informational"
                cofenes_threat_level = "Benign"
            elif (
                int(confidence) > consts.THREAT_LEVEL_INTERMEDIATE
                and int(confidence) <= consts.THREAT_LEVEL_SUSPICIOUS
            ):
                actions = "Warn"
                severity = "Medium"
                cofenes_threat_level = "Suspicious"
            elif (
                int(confidence) > consts.THREAT_LEVEL_SUSPICIOUS
                and int(confidence) <= consts.THREAT_LEVEL_MALICIOUS
            ):
                actions = "Block"
                severity = "High"
                cofenes_threat_level = "Malicious"
            else:
                raise CofenseException()
            return actions, severity, cofenes_threat_level
        except CofenseException as error:
            applogger.error(
                "{}(method={}) : {} : Unknown confidence value from sentinel. "
                "Sentinel Indicator name : {}. Error : {}.".format(
                    consts.LOGS_STARTS_WITH,
                    __method_name,
                    consts.SENTINEL_TO_DEFENDER,
                    indicator.get("properties", {}).get("displayName", None),
                    error,
                )
            )
            raise CofenseException()
To convert sentinel confidence value to defender action.
Solutions/CofenseTriage/Data Connectors/CofenseTriageDataConnector/IndicatorCreatorToDefender/sentinel_to_defender_mapping.py