Detectors

17 detectors match the current filters. tactic: TA0001 ✕ technique: T1566 ✕

Download CSV

2 Analytics 15 Analytics BIOC

Severity mix

Low 17 100%

Detector type

Analytics 2 12%
Analytics BIOC 15 88%

Data sources

XDR Agent 7
Office 365 Audit 6
Microsoft 365 Emails 4
XDR Agent with eXtended Threat Hunting (XTH) 2
AzureAD Audit Log 1
Microsoft Graph Logs 1
Okta 1
Palo Alto Networks Firewall EAL Logs 1
Palo Alto Networks Firewall threat Logs 1
Palo Alto Networks Global Protect 1

Showing the top 10 of 11; the filter rail lists them all.

Detector tags

Microsoft Teams 2
Exfiltration 1
Injection Analytics 1
Malicious URLs 1
Phishing 1

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Email Security	Email Security	8	5	8 low
Platform Analytics	Included with the platform	6	3	6 low
Identity Threat Detection (ITDR)	Identity Threat Detection (ITDR)	6	2	6 low
Identity Analytics	Included with the platform	1	1	1 low