Detectors

251 detectors match the current filters. tactic: TA0006 ✕

Download CSV

63 Analytics 139 Analytics BIOC 49 BIOC

Severity mix

Informational 147 59%
Low 69 27%
Medium 21 8%
High 14 6%

Detector type

Analytics 63 25%
Analytics BIOC 139 55%
BIOC 49 20%

Data sources

XDR Agent 66
XDR Agent with eXtended Threat Hunting (XTH) 64
AWS Audit Log 23
Azure Audit Log 19
Gcp Audit Log 12
Okta 12
Windows Event Collector 12
Microsoft 365 Emails 11
AzureAD 10
Palo Alto Networks Firewall traffic Logs 10

Showing the top 10 of 24; the filter rail lists them all.

Detector tags

Showing the top 10 of 28; the filter rail lists them all.

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Platform Analytics	Included with the platform	123	9	55 informational · 38 low · 17 medium · 13 high
Identity Analytics	Included with the platform	65	8	43 informational · 19 low · 3 medium
Cortex Cloud	Cloud Runtime Security (CRS)	40	7	31 informational · 7 low · 1 medium · 1 high
Identity Threat Detection (ITDR)	Identity Threat Detection (ITDR)	12	6	7 informational · 5 low
Email Security	Email Security	11	2	11 informational