Detectors

107 detectors match the current filters. tactic: TA0040 ✕

Download CSV

20 Analytics 73 Analytics BIOC 13 BIOC 1 Correlation Rule

Severity mix

Informational 71 66%
Low 22 21%
Medium 9 8%
High 5 5%

Detector type

Analytics 20 19%
Analytics BIOC 73 68%
BIOC 13 12%
Correlation Rule 1 1%

Data sources

AWS Audit Log 43
Gcp Audit Log 35
Azure Audit Log 27
XDR Agent 11
Google Workspace Audit Logs 6
Health Monitoring Data 6
Kubernetes Audit Logs 5
AzureAD Audit Log 3
Office 365 Audit 3
XDR Agent with eXtended Threat Hunting (XTH) 3

Showing the top 10 of 22; the filter rail lists them all.

Detector tags

Showing the top 10 of 11; the filter rail lists them all.

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Cortex Cloud	Cloud Runtime Security (CRS)	64	6	49 informational · 11 low · 3 medium · 1 high
Platform Analytics	Included with the platform	29	3	11 informational · 8 low · 6 medium · 4 high
Identity Threat Detection (ITDR)	Identity Threat Detection (ITDR)	11	2	8 informational · 3 low
Identity Analytics	Included with the platform	2	2	2 informational
Email Security	Email Security	1	1	1 informational