Carbon Black Cloud: What is the difference between Threat Alerts and Observed Alerts?
book
Article ID: 288696
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Issue/Introduction
What is the difference between Threat and Observed Alerts?
Environment
- Carbon Black Cloud Console: Alerts page
Resolution
- Threat Alerts are highly likely to be malicious based on our Analytics
- Observed Alerts are behaviors which may be useful for conducting investigations but not clearly malicious from gathered data
Feedback
thumb_up
Yes
thumb_down
No