Carbon Black Cloud: What is the difference between Threat Alerts and Observed Alerts?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

What is the difference between Threat and Observed Alerts?

Environment

• Carbon Black Cloud Console: Alerts page

Resolution

• Threat Alerts are highly likely to be malicious based on our Analytics
• Observed Alerts are behaviors which may be useful for conducting investigations but not clearly malicious from gathered data