Tag Types
Table of Contents
Tag Types
Tag colors and icons allow you to easily distinguish
the different tag types at a glance. When a tag is linked to a Tag
Class, its default icon changes into a tag class icon.
Tag Type | Description |
|---|---|
Unit
42 Tag (Alerting) 
| Unit 42 tags are created by Unit 42, the
Palo Alto Networks® threat intelligence and research team, to detect and
identify threats and campaigns that pose a direct security risk. Unit
42 tags have an orange outline and a Unit 42 icon. Tags for threats
discovered by an individual or organization outside of Unit 42 have
a pointed and marked top right corner. Enable AutoFocus
Alerts for Unit 42 tags to receive immediate notifications
from AutoFocus when it detects samples in your network that match
Unit 42 tags. |
Unit
42 Informational Tag (Non-Alerting) 
| Unit 42 also publishes informational tags
that group and identify commodity threats. Often, threat signatures already
exist and are distributed to identify and enforce the traffic identified
with informational tags. When you enable AutoFocus
Alerts for Unit 42 tags, AutoFocus does not generate alerts
for samples that match Unit 42 informational tags so you can focus
your resources on addressing targeted or pervasive threats. Informational
tags have faded orange outline and a Unit 42 icon. Tags for threats
discovered by an individual or organization outside of Unit 42 have
a pointed and marked top right corner. |
My Private Tag 
| Create
a Tag that is visible only to your organization. Private
tags allow you to tag a sample hash or a set of search conditions
that might be specific or especially significant to your environment.
You can then Create
Alerts for the private tags. Private tags have a blue
outline and a tag icon. |
Public Tag 
| Public tags are tags shared with the AutoFocus community
by your organization and other AutoFocus users. They are visible
to all AutoFocus users. Public tags have a gray outline and
a tag icon. |