Detectors

55 detectors match the current filters.

Download CSV

55 Analytics

Severity mix

Informational 29 53%
Low 20 36%
Medium 5 9%
High 1 2%

Detector type

Analytics 55 100%

Data sources

XDR Agent with eXtended Threat Hunting (XTH) 55
Windows Event Collector 15
XDR Agent 8
AzureAD Audit Log 4
Microsoft Graph Logs 4
Office 365 Audit 4
Okta 4
Palo Alto Networks Global Protect 4
Third-Party VPNs 4
Palo Alto Networks Firewall EAL Logs 3

Detector tags

Showing the top 10 of 14; the filter rail lists them all.

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Identity Analytics	Included with the platform	24	7	14 informational · 7 low · 3 medium
Platform Analytics	Included with the platform	14	8	5 informational · 8 low · 1 medium
Identity Threat Detection (ITDR)	Identity Threat Detection (ITDR)	14	6	9 informational · 4 low · 1 medium
Cortex Cloud	Cloud Runtime Security (CRS)	3	4	1 informational · 1 low · 1 high