Threat Rules
Threat categories provided as standard out-of-the-box
| APM | AWS | Active Directory | Application | Asset | Visibility | Azure | Cloud | Collection | Command and Control |
| Configuration Audit | Credential Access | Data Protection | Defense Evasion | Endpoint Security | Execution | GCP | Google Workspace | Host | Identity |
| Identity and Access | Impact | Initial Access | Lateral Movement | Linux | Log Auditing | MacOS | Microsoft 365 | Network | Okta |
| Persistence | Post-Execution | Privilege Escalation | Windows | Zoom | cyberarkpas |