A characteristic or distinctive pattern that can be searched for or that can be used in matching to previously identified attacks.

Extended Definition: An automated set of rules for identifying a potential threat (such as an exploit or the presence of an attacker tool) and possible responses to that threat.

Related Term(s): Attack Pattern

Adapted from: NCSD Glossary, CNSSI 4009, ISSG V1.2 Database