Detectors

Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.

Filters

Clear

Count variations separately Analytics variations become rows of their own

10 detectors match the current filters. tactic: TA0001 ✕ technique: T1078 ✕

Download CSV

2 Analytics 8 Analytics BIOC

Severity mix

Informational 4 40%
Low 5 50%
High 1 10%

Detector type

Analytics 2 20%
Analytics BIOC 8 80%

Data sources

Detector tags

Honey User Analytics 1

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Identity Analytics	Included with the platform	9	3	4 informational · 4 low · 1 high
Platform Analytics	Included with the platform	1	2	1 low