Detectors

Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.

Filters

Clear

Count variations separately Analytics variations become rows of their own

Detector type ▾

Analytics BIOC 3

Severity ▾

Informational 3

Module / licence ▾

Platform Analytics 3

Data source (1) ▾

Analytics and correlation rules

Palo Alto Networks Firewall traffic Logs 3 XDR Agent 3 Microsoft 365 Emails 1 Third-Party Firewalls 1

3 detectors match the current filters. tactic: TA0010 ✕ technique: T1566 ✕

Download CSV

2 tactics · 2 techniques · cell shade = number of matching detectors; click a cell to list them.

Initial Access 3 detectors

Exfiltration 3 detectors