A characteristic or distinctive pattern that can be searched for or that can be used in matching to previously identified attacks.
Extended Definition: An automated set of rules for identifying a potential threat (such as an exploit or the presence of an attacker tool) and possible responses to that threat.
Related Term(s): Attack Pattern
Adapted from: NCSD Glossary, CNSSI 4009, ISSG V1.2 Database