What are Indicator Sets?

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

What is an Indicator Set?

Environment

• App Control Console: All Supported Versions

Resolution

• An Indicator Set are a group of related ATIs (detection rules) for the platform specified by its name. More details regarding Indicator Sets can be found in the User Guide chapter, "Advanced Threat Detection".
• Indicator sets are proprietary information and therefore the logic they use will not be shared externally
• Indicator Sets are being deprecated in favor of utilizing Rapid Configs, as Rapid Configs will allow for more flexibility.