Endpoint Standard: Are Policy Actions Triggered by TTPs?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Are policy actions triggered by TTPs?

Environment

• All Endpoint Standard: All Versions

Resolution

No.  TTPs do not determine which policies are applied.

Additional Information

• Endpoint Standard technology gathers endpoint telemetry from across the enterprise leveraging data science to analyze attacker behavior and automatically adapt a response.
• TTPs are used as descriptors on various actions leading to an Alert.  This helps provide context around detected attacks which are prevented by Endpoint Standard policy actions.