Endpoint Standard: Are Policy Actions Triggered by TTPs?
book
Article ID: 285641
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Issue/Introduction
Are policy actions triggered by TTPs?
Environment
All Endpoint Standard: All Versions
Resolution
No. TTPs do not determine which policies are applied.
Additional Information
Endpoint Standard technology gathers endpoint telemetry from across the enterprise leveraging data science to analyze attacker behavior and automatically adapt a response.
TTPs are used as descriptors on various actions leading to an Alert. This helps provide context around detected attacks which are prevented by Endpoint Standard policy actions.