Detectors

18 detectors match the current filters. tactic: TA0010 ✕

Download CSV

7 Analytics 11 Analytics BIOC

Severity mix

Informational 14 78%
Low 3 17%
Medium 1 6%

Detector type

Analytics 7 39%
Analytics BIOC 11 61%

Data sources

Office 365 Audit 6
XDR Agent with eXtended Threat Hunting (XTH) 6
Google Workspace Audit Logs 4
Palo Alto Networks Firewall EAL Logs 2
Palo Alto Networks Firewall threat Logs 2
XDR Agent 2
AzureAD 1
Box Audit Log 1
DropBox 1
Palo Alto Networks Firewall traffic Logs 1

Showing the top 10 of 11; the filter rail lists them all.

Detector tags

Google Workspace 3
Data Detection & Response 2
Microsoft Teams 1
O365 DLP Analytics 1

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Identity Threat Detection (ITDR)	Identity Threat Detection (ITDR)	18	6	14 informational · 3 low · 1 medium
Email Security	Email Security	4	2	2 informational · 2 low