Carbon Black Cloud: How To Search For TTP:PortScan and TTP:Port_Scan Alerts

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

How To Search For TTP:PortScan and TTP:Port_Scan Alerts.

Environment

• Carbon Black Cloud Console: All Versions
• Endpoint Standard Sensor: All Supported Versions
• Microsoft Windows: All Supported Versions
• Apple macOS: All Supported Versions
• Linux: All Supported Versions

Resolution

If you toggle the threat button under Target Value Alert Severity you will refresh the results and they will appear.