Detectors

52 detectors match the current filters.

Download CSV

29 Analytics 23 Analytics BIOC

Severity mix

Informational 33 63%
Low 13 25%
Medium 5 10%
High 1 2%

Detector type

Analytics 29 56%
Analytics BIOC 23 44%

Data sources

XDR Agent 52
Palo Alto Networks Firewall traffic Logs 4
Palo Alto Networks Firewall EAL Logs 3
XDR Agent with eXtended Threat Hunting (XTH) 3
AzureAD Audit Log 1
Microsoft Graph Logs 1
Office 365 Audit 1
Okta 1
Palo Alto Networks Firewall threat Logs 1
Palo Alto Networks Global Protect 1

Showing the top 10 of 11; the filter rail lists them all.

Detector tags

Microsoft SCCM Analytics 3
Active Directory Certificate Services Analytics 1
Enhanced RDP Analytics 1
Honey User Analytics 1

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Identity Analytics	Included with the platform	52	10	33 informational · 13 low · 5 medium · 1 high