Detectors

Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.

1 detector match the current filters.

Download CSV
Type Name Severity Module Data source / event ATT&CK
Correlation Rule Microsoft Defender for Endpoint - Malware Detected This alert will trigger when Malware is detected by Microsoft Defender for Endpoint. High Enterprise Runtime Security, Cortex Cloud Microsoft Defender Advanced Threat Protection, microsoft_365_defender_raw