Analytics

Cortex XSIAM Analytics analyzes sensor data, establishes behavioral baselines, and creates issues for suspicious activity.

Use Analytics rules and BIOCs to investigate anomalies across endpoints, networks, and identities.

### Explore analytics

* [analytics-overview](analytics/analytics-overview "mention")
* [analytics-engine](analytics/analytics-engine "mention")
* [analytics-sensors](analytics/analytics-sensors "mention")
* [coverage-of-mitre-attack-tactics](analytics/coverage-of-mitre-attack-tactics "mention")
* [review-mitre-att-and-ck-framework-coverage](analytics/review-mitre-att-and-ck-framework-coverage "mention")
* [analytics-detection-time-intervals](analytics/analytics-detection-time-intervals "mention")
* [analytics-issues-and-analytics-biocs](analytics/analytics-issues-and-analytics-biocs "mention")
* [view-and-manage-analytics-rules](analytics/view-and-manage-analytics-rules "mention")
* [identity-analytics](analytics/identity-analytics "mention")
* [ai-detection-and-response-in-cortex-xsiam-beta](analytics/ai-detection-and-response-in-cortex-xsiam-beta "mention")

***

Sub-topics

• Analytics overview
• Analytics engine
• Analytics sensors
• Coverage of MITRE Attack tactics
• Review MITRE ATT&CK framework coverage
• Analytics detection time intervals
• Analytics issues and Analytics BIOCs
• Identity Analytics
• View and manage Analytics rules
• AI Detection & Response in Cortex XSIAM
  • Data sources and supported services
  • Collect prompt logs
    • Prompt log collection in AWS
    • Enable prompt log collection in Azure
      • Configure the Azure Event Hub collection in Cortex XSIAM
      • Set up prompt logging
      • Log HTTP data
      • Configure diagnostic settings