Detection catalogue

Explore published rules with transparent provenance, licensing, and ATT&CK mappings.

matching detections

Loading detections…

Cyren Feed Outage Detection

Detects when the Cyren threat intelligence feed has not ingested any data for 6 or more hours. This may indicate a connectivity issue with the data connector, API authentication problems, or upstream service disruption.

ATT&CK coverage

Outside the enterprise matrix

T1685Disable or Modify ToolsMapped as T1562, withdrawn by ATT&CK.

Detection requirements

Log source product: cyrenthreatintel
Log source service: cyren_indicators_cl

What the source says

Tagged by the source as

DefenseEvasion

Detection logic

Published to signed-in readers

The query as its source wrote it, its canonical form, and the content hash that pins this exact revision.