Detectors

22 detectors match the current filters. tactic: TA0010 ✕

Download CSV

22 Analytics

Severity mix

Informational 12 55%
Low 10 45%

Detector type

Analytics 22 100%

Data sources

XDR Agent 8
Azure Audit Log 6
Gcp Audit Log 5
Palo Alto Networks Firewall traffic Logs 5
XDR Agent with eXtended Threat Hunting (XTH) 5
AWS Audit Log 4
Palo Alto Networks Firewall EAL Logs 3
Office 365 Audit 2
Third-Party Firewalls 2
Box Audit Log 1

Showing the top 10 of 16; the filter rail lists them all.

Detector tags

Data Detection & Response 7
Cloud Data Asset Exfiltration 6
Exfiltration 1
Microsoft Graph Activity Logs 1
O365 DLP Analytics 1

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Platform Analytics	Included with the platform	7	2	1 informational · 6 low
Cortex Cloud	Cloud Runtime Security (CRS)	7	2	4 informational · 3 low
Identity Threat Detection (ITDR)	Identity Threat Detection (ITDR)	7	2	6 informational · 1 low
Email Security	Email Security	2	2	2 informational