Detectors

Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.

129 detectors match the current filters. tactic: TA0001 ✕

Download CSV

Severity mix

Detector type

Data sources

Showing the top 10 of 27; the filter rail lists them all.

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module Licensed by Detectors Tactics covered Severity mix
Identity Analytics Included with the platform 40 6
26 informational · 10 low · 1 medium · 3 high
Cortex Cloud Cloud Runtime Security (CRS) 31 9
22 informational · 5 low · 3 medium · 1 high
Email Security Email Security 23 5
15 informational · 8 low
Platform Analytics Included with the platform 22 8
8 informational · 13 low · 1 medium
Identity Threat Detection (ITDR) Identity Threat Detection (ITDR) 17 7
11 informational · 6 low