Detectors

239 detectors match the current filters.

Download CSV

239 Analytics

Severity mix

Informational 146 61%
Low 71 30%
Medium 17 7%
High 5 2%

Detector type

Analytics 239 100%

Data sources

XDR Agent 80
XDR Agent with eXtended Threat Hunting (XTH) 55
AWS Audit Log 43
Azure Audit Log 30
Gcp Audit Log 24
Palo Alto Networks Firewall traffic Logs 22
Office 365 Audit 20
Microsoft Graph Logs 15
Palo Alto Networks Firewall EAL Logs 15
Windows Event Collector 15

Showing the top 10 of 31; the filter rail lists them all.

Detector tags

Showing the top 10 of 33; the filter rail lists them all.

What each module brings

See the ATT&CK matrix for this selection →

Detectors this selection gains from each licensable module, how much of ATT&CK they cover, and how their severities split. Click a module to keep only its detectors.

Module	Licensed by	Detectors	Tactics covered	Severity mix
Platform Analytics	Included with the platform	66	13	26 informational · 34 low · 5 medium · 1 high
Identity Analytics	Included with the platform	63	10	40 informational · 18 low · 5 medium
Cortex Cloud	Cloud Runtime Security (CRS)	58	11	37 informational · 12 low · 5 medium · 4 high
Identity Threat Detection (ITDR)	Identity Threat Detection (ITDR)	45	12	37 informational · 7 low · 1 medium
Email Security	Email Security	11	8	10 informational · 1 medium