Detectors

264 detectors match the current filters. tactic: TA0003 ✕

Download CSV

13 Analytics 200 Analytics BIOC 50 BIOC 1 Correlation Rule

Severity mix

Informational 180 68%
Low 55 21%
Medium 28 11%
High 1 0%

Detector type

Analytics 13 5%
Analytics BIOC 200 76%
BIOC 50 19%
Correlation Rule 1 0%

Data sources

XDR Agent with eXtended Threat Hunting (XTH) 57
XDR Agent 52
AWS Audit Log 43
Azure Audit Log 25
Gcp Audit Log 25
Windows Event Collector 24
AzureAD Audit Log 12
Microsoft Graph Logs 9
Google Workspace Audit Logs 7
Office 365 Audit 7

Showing the top 10 of 14; the filter rail lists them all.

Detector tags

Showing the top 10 of 28; the filter rail lists them all.

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Platform Analytics	Included with the platform	131	9	68 informational · 40 low · 23 medium
Cortex Cloud	Cloud Runtime Security (CRS)	70	9	64 informational · 5 low · 1 high
Identity Threat Detection (ITDR)	Identity Threat Detection (ITDR)	33	7	31 informational · 2 low
Identity Analytics	Included with the platform	30	6	17 informational · 8 low · 5 medium
Email Security	Email Security	2	1	2 informational