Analytics Alerts
Browse the Cortex analytics alert reference.
1 alert match the current filters.
Download CSV Show ATT&CK heatmapAn Azure Suppression Rule was created Informational Cloud
An Azure Suppression Rule was created.
- Activation:
- 14 Days
- Training:
- 30 Days
- Test:
- N/A (single event)
- Deduplication:
- 5 Days
ATT&CK tactics: Defense Evasion (TA0005)ATT&CK techniques: Impair Defenses (T1562)Required data: Azure Audit LogDetector tags: Cloud Log Tampering AnalyticsAttacker's goals: Bypass security measures.Investigative actions: Investigate the user's activity to determine the cause of the alert.