Threat Rules

Threat Rules

Threat categories provided as standard out-of-the-box

APM	AWS	Active Directory	Application	Asset	Visibility	Azure	Cloud	Collection	Command and Control
Configuration Audit	Credential Access	Data Protection	Defense Evasion	Endpoint Security	Execution	GCP	Google Workspace	Host	Identity
Identity and Access	Impact	Initial Access	Lateral Movement	Linux	Log Auditing	MacOS	Microsoft 365	Network	Okta
Persistence	Post-Execution	Privilege Escalation	Windows	Zoom	cyberarkpas