Detectors

366 detectors match the current filters. tactic: TA0005 ✕

Download CSV

6 Analytics 251 Analytics BIOC 109 BIOC

Severity mix

Informational 247 67%
Low 76 21%
Medium 36 10%
High 7 2%

Detector type

Analytics 6 2%
Analytics BIOC 251 69%
BIOC 109 30%

Data sources

XDR Agent 88
AWS Audit Log 44
Azure Audit Log 39
XDR Agent with eXtended Threat Hunting (XTH) 31
Gcp Audit Log 24
Microsoft 365 Emails 20
Office 365 Audit 14
AzureAD Audit Log 12
Google Workspace Audit Logs 7
Windows Event Collector 7

Showing the top 10 of 25; the filter rail lists them all.

Detector tags

Showing the top 10 of 37; the filter rail lists them all.

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Platform Analytics	Included with the platform	215	11	126 informational · 50 low · 32 medium · 7 high
Cortex Cloud	Cloud Runtime Security (CRS)	80	10	70 informational · 9 low · 1 medium
Identity Threat Detection (ITDR)	Identity Threat Detection (ITDR)	35	8	23 informational · 11 low · 1 medium
Email Security	Email Security	31	3	23 informational · 8 low
Identity Analytics	Included with the platform	16	5	9 informational · 5 low · 2 medium