Detectors

46 detectors match the current filters. technique: T1059 ✕

Download CSV

46 Analytics BIOC

Severity mix

Informational 24 52%
Low 15 33%
Medium 5 11%
High 2 4%

Detector type

Analytics BIOC 46 100%

Data sources

XDR Agent 32
AWS Audit Log 5
Azure Audit Log 3
XDR Agent with eXtended Threat Hunting (XTH) 3
Gcp Audit Log 1
Google Workspace Audit Logs 1
Okta Audit Log 1
Palo Alto Networks Url Logs 1
Windows Event Collector 1

Detector tags

Showing the top 10 of 17; the filter rail lists them all.

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Platform Analytics	Included with the platform	34	9	14 informational · 14 low · 4 medium · 2 high
Cortex Cloud	Cloud Runtime Security (CRS)	10	6	8 informational · 1 low · 1 medium
Identity Threat Detection (ITDR)	Identity Threat Detection (ITDR)	2	4	2 informational