Detectors

22 detectors match the current filters. tactic: TA0007 ✕ technique: T1018 ✕

Download CSV

9 Analytics 5 Analytics BIOC 8 BIOC

Severity mix

Informational 15 68%
Low 4 18%
Medium 3 14%

Detector type

Analytics 9 41%
Analytics BIOC 5 23%
BIOC 8 36%

Data sources

XDR Agent 8
XDR Agent with eXtended Threat Hunting (XTH) 5
Palo Alto Networks Firewall traffic Logs 2
AWS Audit Log 1
Third-Party Firewalls 1

Detector tags

LDAP Analytics (Server) 2
Containers 1
Kubernetes - AGENT 1
LDAP Analytics (Client) 1
SSM Remote Management Analytics 1

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Platform Analytics	Included with the platform	19	1	12 informational · 4 low · 3 medium
Identity Analytics	Included with the platform	2	1	2 informational
Cortex Cloud	Cloud Runtime Security (CRS)	1	2	1 informational