indicator

indicator

noun

What an observable becomes after Threat Intelligence Management enriches and scores it to provide deeper context and intelligence. Indicators help to determine if there is harmful activity on a network, such as a security breach.

Related terms

• notable event
• incident
• artifact
• key indicators

For more information

In Investigate and Respond to Threats in Splunk Mission Control:

• Explore threat object intelligence in Splunk Mission Control