Detectors

Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.

51 detectors match the current filters. tactic: TA0007 ✕

Download CSV
51 Analytics

Severity mix

Detector type

Data sources

Showing the top 10 of 18; the filter rail lists them all.

Detector tags

Showing the top 10 of 13; the filter rail lists them all.

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module Licensed by Detectors Tactics covered Severity mix
Cortex Cloud Cloud Runtime Security (CRS) 27 4
24 informational · 1 low · 2 medium
Platform Analytics Included with the platform 15 1
10 informational · 5 low
Identity Analytics Included with the platform 7 2
5 informational · 1 low · 1 medium
Identity Threat Detection (ITDR) Identity Threat Detection (ITDR) 2 2
2 informational