Detectors

139 detectors match the current filters. tactic: TA0006 ✕

Download CSV

139 Analytics BIOC

Severity mix

Informational 81 58%
Low 45 32%
Medium 7 5%
High 6 4%

Detector type

Analytics BIOC 139 100%

Data sources

XDR Agent with eXtended Threat Hunting (XTH) 48
XDR Agent 35
AWS Audit Log 19
Azure Audit Log 18
Gcp Audit Log 11
Microsoft 365 Emails 10
Windows Event Collector 6
Palo Alto Networks Firewall EAL Logs 5
AzureAD 4
Kubernetes Audit Logs 4

Showing the top 10 of 22; the filter rail lists them all.

Detector tags

Showing the top 10 of 26; the filter rail lists them all.

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Platform Analytics	Included with the platform	63	8	22 informational · 28 low · 7 medium · 6 high
Cortex Cloud	Cloud Runtime Security (CRS)	34	6	28 informational · 6 low
Identity Analytics	Included with the platform	22	6	16 informational · 6 low
Identity Threat Detection (ITDR)	Identity Threat Detection (ITDR)	10	4	5 informational · 5 low
Email Security	Email Security	10	2	10 informational