Detectors

21 detectors match the current filters. technique: T1053 ✕

Download CSV

1 Analytics 17 Analytics BIOC 3 BIOC

Severity mix

Informational 10 48%
Low 10 48%
Medium 1 5%

Detector type

Analytics 1 5%
Analytics BIOC 17 81%
BIOC 3 14%

Data sources

XDR Agent 11
XDR Agent with eXtended Threat Hunting (XTH) 5
AWS Audit Log 2
Palo Alto Networks Firewall EAL Logs 2
Azure Audit Log 1
Gcp Audit Log 1
Kubernetes Audit Logs 1

Detector tags

Scheduled tasks Analytics 10
NDR Lateral Movement Analytics 2
Impacket Analytics 1
Kubernetes - API 1
NDR Unmanaged Subnet Analytics 1

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Platform Analytics	Included with the platform	19	5	8 informational · 10 low · 1 medium
Cortex Cloud	Cloud Runtime Security (CRS)	2	2	2 informational