Detectors

Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.

Filters

Clear

Count variations separately Analytics variations become rows of their own

Detector type ▾

Analytics BIOC 2

Severity ▾

Informational 2

Module / licence (1) ▾

SaaS Threat Detection 2 Email Security 2 Identity Threat Detection (ITDR) 2

Data source (1) ▾

Analytics and correlation rules

Microsoft 365 Emails 2 Office 365 Audit 2

2 detectors match the current filters. technique: T1564 ✕

Download CSV

Type	Name	Severity	Module	Data source / event	ATT&CK
Analytics BIOC	Exchange email-hiding inbox rule A user configured an Exchange inbox rule that may be used to hide emails.	Informational	Identity Threat Detection (ITDR), SaaS Threat Detection, Email Security	Office 365 Audit	Defense Evasion
Analytics BIOC	Exchange email-hiding transport rule A user configured an Exchange transport rule that may be used to hide emails in the organization.	Informational	Identity Threat Detection (ITDR), SaaS Threat Detection, Email Security	Office 365 Audit	Defense Evasion