Detectors

Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.

43 detectors match the current filters. technique: T1204 ✕

Download CSV

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module Licensed by Detectors Tactics covered Severity mix
Email Security Email Security 21 4
19 informational · 2 low
Platform Analytics Included with the platform 16 5
4 informational · 7 low · 4 medium · 1 high
Identity Analytics Included with the platform 3 1
3 informational
Cortex Cloud Cloud Runtime Security (CRS) 3 1
2 informational · 1 high