Detectors

33 detectors match the current filters. technique: T1071 ✕

Download CSV

7 Analytics 26 Analytics BIOC

Severity mix

Informational 16 48%
Low 16 48%
Medium 1 3%

Detector type

Analytics 7 21%
Analytics BIOC 26 79%

Data sources

XDR Agent 33
Palo Alto Networks Firewall traffic Logs 8
Third-Party Firewalls 6
Palo Alto Networks Firewall EAL Logs 3
XDR Agent with eXtended Threat Hunting (XTH) 2
Palo Alto Networks Firewall threat Logs 1

Detector tags

EDR Windows C2 Analytics 12
Global Anomaly Analytics 5
Abnormal Communication Analytics 3
Containers 1
Kubernetes - AGENT 1
NDR Lateral Movement Analytics 1

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Platform Analytics	Included with the platform	33	6	16 informational · 16 low · 1 medium