Detectors

66 detectors match the current filters. tactic: TA0010 ✕

Download CSV

12 Analytics 48 Analytics BIOC 6 BIOC

Severity mix

Informational 66 100%

Detector type

Analytics 12 18%
Analytics BIOC 48 73%
BIOC 6 9%

Data sources

AWS Audit Log 23
XDR Agent 14
Azure Audit Log 12
Gcp Audit Log 11
Palo Alto Networks Firewall traffic Logs 6
XDR Agent with eXtended Threat Hunting (XTH) 5
Office 365 Audit 4
Google Workspace Audit Logs 3
Palo Alto Networks Firewall EAL Logs 3
Microsoft 365 Emails 2

Showing the top 10 of 17; the filter rail lists them all.

Detector tags

Showing the top 10 of 15; the filter rail lists them all.

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Cortex Cloud	Cloud Runtime Security (CRS)	32	4	32 informational
Platform Analytics	Included with the platform	18	3	18 informational
Identity Threat Detection (ITDR)	Identity Threat Detection (ITDR)	14	6	14 informational
Email Security	Email Security	4	2	4 informational