Detectors

Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.

Filters

Clear

Count variations separately Analytics variations become rows of their own

16 detectors match the current filters.

Download CSV

4 Analytics 12 Analytics BIOC

Severity mix

Informational 10 63%
Low 5 31%
High 1 6%

Detector type

Analytics 4 25%
Analytics BIOC 12 75%

Data sources

Palo Alto Networks Global Protect 16
Third-Party VPNs 16
AzureAD Audit Log 1
Microsoft Graph Logs 1
Office 365 Audit 1
Okta 1
XDR Agent 1
XDR Agent with eXtended Threat Hunting (XTH) 1

Detector tags

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Identity Analytics	Included with the platform	16	5	10 informational · 5 low · 1 high