Detectors

39 detectors match the current filters. tactic: TA0009 ✕

Download CSV

1 Analytics 20 Analytics BIOC 18 BIOC

Severity mix

Informational 21 54%
Low 13 33%
Medium 4 10%
High 1 3%

Detector type

Analytics 1 3%
Analytics BIOC 20 51%
BIOC 18 46%

Data sources

XDR Agent 10
XDR Agent with eXtended Threat Hunting (XTH) 10
Windows Event Collector 2
Palo Alto Networks Firewall EAL Logs 1
Palo Alto Networks Firewall traffic Logs 1
Third-Party Firewalls 1

Detector tags

Sensitive Information Stealing Analytics 7
AppleScript Analytics 3
Containers 2
Kubernetes - AGENT 2
Active Directory Certificate Services Analytics 1

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Platform Analytics	Included with the platform	39	6	21 informational · 13 low · 4 medium · 1 high