Detectors

Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.

21 detectors match the current filters. tactic: TA0001 ✕ technique: T1078 ✕

Download CSV

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module Licensed by Detectors Tactics covered Severity mix
Identity Analytics Included with the platform 11 2
11 low
Platform Analytics Included with the platform 4 3
4 low
Cortex Cloud Cloud Runtime Security (CRS) 4 4
4 low
Identity Threat Detection (ITDR) Identity Threat Detection (ITDR) 2 1
2 low