Detectors

177 detectors match the current filters. tactic: TA0007 ✕

Download CSV

51 Analytics 78 Analytics BIOC 48 BIOC

Severity mix

Informational 133 75%
Low 28 16%
Medium 16 9%

Detector type

Analytics 51 29%
Analytics BIOC 78 44%
BIOC 48 27%

Data sources

XDR Agent 42
XDR Agent with eXtended Threat Hunting (XTH) 36
AWS Audit Log 34
Azure Audit Log 21
Gcp Audit Log 11
Microsoft Graph Logs 11
Palo Alto Networks Firewall traffic Logs 5
Kubernetes Audit Logs 3
Third-Party Firewalls 3
Windows Event Collector 3

Showing the top 10 of 18; the filter rail lists them all.

Detector tags

Showing the top 10 of 20; the filter rail lists them all.

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Platform Analytics	Included with the platform	110	8	74 informational · 24 low · 12 medium
Cortex Cloud	Cloud Runtime Security (CRS)	48	7	44 informational · 1 low · 3 medium
Identity Analytics	Included with the platform	16	3	12 informational · 3 low · 1 medium
Identity Threat Detection (ITDR)	Identity Threat Detection (ITDR)	3	2	3 informational