Endpoint Standard: Are Policy Actions Triggered by TTPs?
search cancel

Endpoint Standard: Are Policy Actions Triggered by TTPs?

book

Article ID: 285641

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Are policy actions triggered by TTPs?

Environment

  • All Endpoint Standard: All Versions

Resolution

No.  TTPs do not determine which policies are applied.

Additional Information

  • Endpoint Standard technology gathers endpoint telemetry from across the enterprise leveraging data science to analyze attacker behavior and automatically adapt a response.
  • TTPs are used as descriptors on various actions leading to an Alert.  This helps provide context around detected attacks which are prevented by Endpoint Standard policy actions.