Detectors

Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.

Filters

Clear

Count variations separately Analytics variations become rows of their own

4 detectors match the current filters. technique: T1562 ✕

Download CSV

Type	Name	Severity	Module	Data source / event	ATT&CK
Analytics BIOC	AI safeguards deletion attempt A cloud identity deleted AI safeguards. MITRE ATLAS Technique: AML.T0015 - Evade ML Model.	Informational	Cortex Cloud	AWS Audit Log, Azure Audit Log	Defense Evasion
Analytics BIOC	AI safeguards were modified A cloud identity modified AI safeguards. MITRE ATLAS Technique: AML.T0015 - Evade ML Model.	Informational	Cortex Cloud	AWS Audit Log, Azure Audit Log	Defense Evasion
Analytics BIOC	AWS Bedrock model invocation logging deletion A cloud identity deleted the model invocation logging.	Low	Cortex Cloud	AWS Audit Log	Defense Evasion
Analytics BIOC	Cloud AI agent was modified A cloud identity modified AI agent. MITRE ATLAS Technique: AML.T0015 - Evade ML Model.	Informational	Cortex Cloud	AWS Audit Log, Gcp Audit Log	Defense Evasion