Detectors

37 detectors match the current filters. tactic: TA0001 ✕

Download CSV

3 Analytics 22 Analytics BIOC 11 BIOC 1 Correlation Rule

Severity mix

Informational 18 49%
Low 15 41%
Medium 2 5%
High 2 5%

Detector type

Analytics 3 8%
Analytics BIOC 22 59%
BIOC 11 30%
Correlation Rule 1 3%

Data sources

XDR Agent 17
Palo Alto Networks Firewall EAL Logs 8
Palo Alto Networks Firewall traffic Logs 6
XDR Agent with eXtended Threat Hunting (XTH) 3
Third-Party Firewalls 2
google_workspace_chrome_raw 1

Detector tags

Webshell Analytics 4
Containers 1
Injection Analytics 1
Kubernetes - AGENT 1
Shell Analytics 1

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Platform Analytics	Included with the platform	37	9	18 informational · 15 low · 2 medium · 2 high