Detectors

68 detectors match the current filters. tactic: TA0002 ✕ technique: T1059 ✕

Download CSV

46 Analytics BIOC 22 BIOC

Severity mix

Informational 38 56%
Low 16 24%
Medium 9 13%
High 5 7%

Detector type

Analytics BIOC 46 68%
BIOC 22 32%

Data sources

XDR Agent 32
AWS Audit Log 5
Azure Audit Log 3
XDR Agent with eXtended Threat Hunting (XTH) 3
Gcp Audit Log 1
Google Workspace Audit Logs 1
Okta Audit Log 1
Palo Alto Networks Url Logs 1
Windows Event Collector 1

Detector tags

Showing the top 10 of 17; the filter rail lists them all.

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Platform Analytics	Included with the platform	56	9	28 informational · 15 low · 8 medium · 5 high
Cortex Cloud	Cloud Runtime Security (CRS)	10	6	8 informational · 1 low · 1 medium
Identity Threat Detection (ITDR)	Identity Threat Detection (ITDR)	2	4	2 informational