Detectors

29 detectors match the current filters. tactic: TA0008 ✕ technique: T1021 ✕

Download CSV

5 Analytics 24 Analytics BIOC

Severity mix

Informational 9 31%
Low 16 55%
Medium 3 10%
High 1 3%

Detector type

Analytics 5 17%
Analytics BIOC 24 83%

Data sources

XDR Agent 29
Palo Alto Networks Firewall traffic Logs 5
Third-Party Firewalls 4
Palo Alto Networks Firewall EAL Logs 1

Detector tags

NDR Lateral Movement Analytics 9
Enhanced RDP Analytics 8
Impacket Analytics 5
NDR Unmanaged Subnet Analytics 2
Malicious Service Analytics 1
Shell Analytics 1

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Platform Analytics	Included with the platform	28	4	8 informational · 16 low · 3 medium · 1 high
Identity Analytics	Included with the platform	1	2	1 informational