Detectors

69 detectors match the current filters. tactic: TA0006 ✕

Download CSV

20 Analytics 45 Analytics BIOC 4 BIOC

Severity mix

Low 69 100%

Detector type

Analytics 20 29%
Analytics BIOC 45 65%
BIOC 4 6%

Data sources

XDR Agent 28
XDR Agent with eXtended Threat Hunting (XTH) 23
Palo Alto Networks Firewall traffic Logs 6
AWS Audit Log 4
Palo Alto Networks Firewall EAL Logs 4
Okta 3
Windows Event Collector 3
Azure Audit Log 2
AzureAD Audit Log 2
OneLogin 2

Showing the top 10 of 22; the filter rail lists them all.

Detector tags

Showing the top 10 of 15; the filter rail lists them all.

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Platform Analytics	Included with the platform	38	8	38 low
Identity Analytics	Included with the platform	19	5	19 low
Cortex Cloud	Cloud Runtime Security (CRS)	7	4	7 low
Identity Threat Detection (ITDR)	Identity Threat Detection (ITDR)	5	3	5 low