Detectors

382 detectors match the current filters.

Download CSV

71 Analytics 271 Analytics BIOC 39 BIOC 1 Correlation Rule

Severity mix

Low 382 100%

Detector type

Analytics 71 19%
Analytics BIOC 271 71%
BIOC 39 10%
Correlation Rule 1 0%

Data sources

XDR Agent 166
XDR Agent with eXtended Threat Hunting (XTH) 84
AWS Audit Log 34
Palo Alto Networks Firewall traffic Logs 23
Palo Alto Networks Firewall EAL Logs 22
Gcp Audit Log 20
Azure Audit Log 18
Third-Party Firewalls 15
Windows Event Collector 15
Office 365 Audit 14

Showing the top 10 of 31; the filter rail lists them all.

Detector tags

Showing the top 10 of 47; the filter rail lists them all.

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Platform Analytics	Included with the platform	257	13	257 low
Cortex Cloud	Cloud Runtime Security (CRS)	47	11	47 low
Identity Analytics	Included with the platform	44	10	44 low
Identity Threat Detection (ITDR)	Identity Threat Detection (ITDR)	29	10	29 low
Email Security	Email Security	14	6	14 low