Detectors

Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.

Filters

Clear

Count variations separately Analytics variations become rows of their own

Detector type ▾

Analytics 1

Severity ▾

Informational 1

Module / licence ▾

Identity Threat Detection (ITDR) 1

Data source (1) ▾

Analytics and correlation rules

XDR Agent with eXtended Threat Hunting (XTH) 6 Windows Event Collector 1

1 detector match the current filters. technique: T1052 ✕

Download CSV

Type	Name	Severity	Module	Data source / event	ATT&CK
Analytics	A user printed an unusual number of files A user printed an unusual number of files. This may be indicative of malicious activity and an attempt to exfiltrate data.	Informational	Identity Threat Detection (ITDR)	Windows Event Collector, XDR Agent with eXtended Threat Hunting (XTH)	Exfiltration