Detectors

232 detectors match the current filters.

Download CSV

55 Analytics 177 Analytics BIOC

Severity mix

Informational 118 51%
Low 84 36%
Medium 26 11%
High 4 2%

Detector type

Analytics 55 24%
Analytics BIOC 177 76%

Data sources

XDR Agent with eXtended Threat Hunting (XTH) 232
Windows Event Collector 56
Palo Alto Networks Firewall EAL Logs 9
XDR Agent 8
AzureAD Audit Log 4
Microsoft Graph Logs 4
Office 365 Audit 4
Okta 4
Palo Alto Networks Global Protect 4
Third-Party VPNs 4

Showing the top 10 of 11; the filter rail lists them all.

Detector tags

Showing the top 10 of 28; the filter rail lists them all.

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Platform Analytics	Included with the platform	131	11	56 informational · 56 low · 16 medium · 3 high
Identity Analytics	Included with the platform	76	9	45 informational · 22 low · 9 medium
Identity Threat Detection (ITDR)	Identity Threat Detection (ITDR)	21	8	15 informational · 5 low · 1 medium
Cortex Cloud	Cloud Runtime Security (CRS)	4	4	2 informational · 1 low · 1 high