Detectors

Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.

Filters

Clear

Count variations separately Analytics variations become rows of their own

Detector type ▾

Correlation Rule 1

Severity ▾

Low 1

Module / licence (1) ▾

Platform Analytics 1

Data source (1) ▾

Analytics and correlation rules

XDR Agent with eXtended Threat Hunting (XTH) 3 Palo Alto Networks Firewall EAL Logs 1 XDR Agent 1 google_workspace_chrome_raw 1

Category ▾

BIOCs and correlation rules

Persistence 1

Content pack ▾

Correlation rules only

Google Chrome 1

1 detector match the current filters. technique: T1176 ✕

Download CSV

Type	Name	Severity	Module	Data source / event	ATT&CK
Correlation Rule	Chrome - Chrome Extension Install Event The extension $xdm.target.resource.name was installed on $xdm.source.host.hostname by $xdm.intermediate.user.username	Low	Platform Analytics	google_workspace_chrome_raw	Persistence