Detectors

114 detectors match the current filters. technique: T1562 ✕

Download CSV

87 Analytics BIOC 27 BIOC

Severity mix

Informational 81 71%
Low 27 24%
Medium 5 4%
High 1 1%

Detector type

Analytics BIOC 87 76%
BIOC 27 24%

Data sources

AWS Audit Log 30
Azure Audit Log 22
Gcp Audit Log 13
Office 365 Audit 10
XDR Agent 7
XDR Agent with eXtended Threat Hunting (XTH) 7
Google Workspace Audit Logs 4
Okta Audit Log 2
Kubernetes Audit Logs 1
Palo Alto Networks Firewall EAL Logs 1

Showing the top 10 of 11; the filter rail lists them all.

Detector tags

Showing the top 10 of 17; the filter rail lists them all.

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Cortex Cloud	Cloud Runtime Security (CRS)	56	4	46 informational · 9 low · 1 medium
Platform Analytics	Included with the platform	38	4	25 informational · 8 low · 4 medium · 1 high
Identity Threat Detection (ITDR)	Identity Threat Detection (ITDR)	18	6	10 informational · 8 low
Email Security	Email Security	8	2	1 informational · 7 low
Identity Analytics	Included with the platform	2	1	2 low