Detectors

64 detectors match the current filters. tactic: TA0006 ✕

Download CSV

16 Analytics 48 Analytics BIOC

Severity mix

Informational 34 53%
Low 23 36%
Medium 5 8%
High 2 3%

Detector type

Analytics 16 25%
Analytics BIOC 48 75%

Data sources

XDR Agent with eXtended Threat Hunting (XTH) 64
Windows Event Collector 12
XDR Agent 3
AzureAD Audit Log 1
Microsoft Graph Logs 1
Office 365 Audit 1
Okta 1
Palo Alto Networks Firewall traffic Logs 1
Palo Alto Networks Global Protect 1
Third-Party VPNs 1

Detector tags

Showing the top 10 of 13; the filter rail lists them all.

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Platform Analytics	Included with the platform	33	5	17 informational · 12 low · 3 medium · 1 high
Identity Analytics	Included with the platform	27	5	15 informational · 10 low · 2 medium
Cortex Cloud	Cloud Runtime Security (CRS)	3	2	2 informational · 1 high
Identity Threat Detection (ITDR)	Identity Threat Detection (ITDR)	1	1	1 low