Detectors

Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.

11 detectors match the current filters. technique: T1078 ✕

Download CSV
10 Analytics BIOC 1 Correlation Rule

Severity mix

Detector type

Data sources

Detector tags

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module Licensed by Detectors Tactics covered Severity mix
Identity Analytics Included with the platform 7 4
7 medium
Platform Analytics Included with the platform 2 2
2 medium
Cortex Cloud Cloud Runtime Security (CRS) 2 2
2 medium