Detectors

Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.

34 detectors match the current filters. technique: T1110 ✕

Download CSV

Severity mix

Detector type

Data sources

Showing the top 10 of 15; the filter rail lists them all.

Detector tags

No tagged detectors in this selection.

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module Licensed by Detectors Tactics covered Severity mix
Identity Analytics Included with the platform 28 5
17 informational · 11 low
Platform Analytics Included with the platform 5 2
2 informational · 2 low · 1 high
Email Security Email Security 1 2
1 informational