Loading ATT&CK
Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice
Every one carries the source it came from and the licence it was published under.
| Detection | Severity |
|---|---|
| Theom - Critical data in API headers or body | High |
| Potential Database Dumping Activity | Low |
| GCP Pub/Sub Subscription Creation | Low |
| AWS EC2 Export Task | Medium |
| Exchange PowerShell Snapin Added | Unknown |
| Vectra AI Detect - Suspicious Behaviors by Category | Informational |
| Vectra AI Detect - Suspected Compromised Host | Informational |
| Vectra Host's Behaviors | Informational |
| Vectra AI Detect - Detections with High Severity | High |
| Vectra AI Detect - Suspected Compromised Account | Informational |
| Vectra Account's Behaviors | Informational |
| Theom Medium Risks | High |
| Theom Low Risks | High |
| Theom Insights | Low |
| Theom High Risks | High |
| Theom Critical Risks | High |
| Sonrai Ticket Updated | Medium |
| Sonrai Ticket Snoozed | Medium |
| Sonrai Ticket Risk Accepted | Medium |
| Sonrai Ticket Reopened | Medium |
| Sonrai Ticket Escalation Executed | Medium |
| Sonrai Ticket Escalation Executed | Medium |
| Sonrai Ticket Closed | Low |
| Sonrai Ticket Assigned | Medium |
| New Sonrai Ticket | Medium |
Showing 25 of 52