Tag Types

Tag colors and icons allow you to easily distinguish the different tag types at a glance. When a tag is linked to a Tag Class, its default icon changes into a tag class icon.
Tag Type
Description
Unit 42 Tag (Alerting)
tag-unit42.png
tag-unit42-external.png
Unit 42 tags are created by Unit 42, the Palo Alto Networks® threat intelligence and research team, to detect and identify threats and campaigns that pose a direct security risk.
Unit 42 tags have an orange outline and a Unit 42 icon. Tags for threats discovered by an individual or organization outside of Unit 42 have a pointed and marked top right corner.
Enable AutoFocus Alerts for Unit 42 tags to receive immediate notifications from AutoFocus when it detects samples in your network that match Unit 42 tags.
Unit 42 Informational Tag (Non-Alerting)
tag-informational.png
tag-unit42-external-informational.png
Unit 42 also publishes informational tags that group and identify commodity threats. Often, threat signatures already exist and are distributed to identify and enforce the traffic identified with informational tags.
When you enable AutoFocus Alerts for Unit 42 tags, AutoFocus does not generate alerts for samples that match Unit 42 informational tags so you can focus your resources on addressing targeted or pervasive threats.
Informational tags have faded orange outline and a Unit 42 icon. Tags for threats discovered by an individual or organization outside of Unit 42 have a pointed and marked top right corner.
My Private Tag
tag-private-icon.png
Create a Tag that is visible only to your organization. Private tags allow you to tag a sample hash or a set of search conditions that might be specific or especially significant to your environment. You can then Create Alerts for the private tags.
Private tags have a blue outline and a tag icon.
Public Tag
tag-public-icon.png
Public tags are tags shared with the AutoFocus community by your organization and other AutoFocus users. They are visible to all AutoFocus users.
Public tags have a gray outline and a tag icon.

Related Documentation