Detectors

251 detectors match the current filters. tactic: TA0005 ✕

Download CSV

251 Analytics BIOC

Severity mix

Informational 166 66%
Low 63 25%
Medium 21 8%
High 1 0%

Detector type

Analytics BIOC 251 100%

Data sources

XDR Agent 86
AWS Audit Log 43
Azure Audit Log 38
XDR Agent with eXtended Threat Hunting (XTH) 29
Gcp Audit Log 23
Microsoft 365 Emails 20
Office 365 Audit 12
AzureAD Audit Log 10
Google Workspace Audit Logs 7
Windows Event Collector 6

Showing the top 10 of 25; the filter rail lists them all.

Detector tags

Showing the top 10 of 35; the filter rail lists them all.

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Platform Analytics	Included with the platform	105	10	48 informational · 39 low · 17 medium · 1 high
Cortex Cloud	Cloud Runtime Security (CRS)	79	9	69 informational · 9 low · 1 medium
Identity Threat Detection (ITDR)	Identity Threat Detection (ITDR)	33	8	21 informational · 11 low · 1 medium
Email Security	Email Security	30	3	22 informational · 8 low
Identity Analytics	Included with the platform	14	5	9 informational · 3 low · 2 medium