> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-03-26.md).

# 2025.03.26

**Release date: 21-April-2025**

| Change type                                         | Changes                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
| --------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Added 2 new Low Analytics BIOCs                     | <ul><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">Certipy AD CS enumeration via LDAP</a></li><li><a href="/analytics-alerts/alerts-by-name/suspicious-access-of-the-system-management-container.md">Suspicious access of the System Management Container</a></li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| Added 3 new Informational Analytics BIOCs           | <ul><li><a href="/analytics-alerts/alerts-by-name/cloud-resource-logging-was-disabled.md">Cloud resource logging was disabled</a></li><li><a href="/analytics-alerts/alerts-by-name/pkinit-tgt-authentication-request.md">PKINIT TGT authentication request</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">Uncommon shell command execution</a></li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| Improved logic of 5 High Analytics BIOCs            | <ul><li><a href="/analytics-alerts/alerts-by-name/a-successful-vpn-connection-from-tor.md">A Successful VPN connection from TOR</a></li><li><a href="/analytics-alerts/alerts-by-name/a-successful-login-from-tor.md">A Successful login from TOR</a></li><li><a href="/analytics-alerts/alerts-by-name/a-successful-sso-sign-in-from-tor.md">A successful SSO sign-in from TOR</a></li><li><a href="/analytics-alerts/alerts-by-name/suspicious-api-call-from-a-tor-exit-node.md">Suspicious API call from a Tor exit node</a></li><li><a href="/analytics-alerts/alerts-by-name/suspicious-saas-api-call-from-a-tor-exit-node.md">Suspicious SaaS API call from a Tor exit node</a></li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
| Improved logic of a High Analytics Alert            | <ul><li><a href="/analytics-alerts/alerts-by-name/suspicious-objects-encryption-in-an-aws-bucket.md">Suspicious objects encryption in an AWS bucket</a></li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| Improved logic of 17 Medium Analytics BIOCs         | <ul><li><a href="/analytics-alerts/alerts-by-name/a-kubernetes-api-operation-was-successfully-invoked-by-an-anonymous-user.md">A Kubernetes API operation was successfully invoked by an anonymous user</a></li><li><a href="/analytics-alerts/alerts-by-name/a-kubernetes-dashboard-service-account-was-used-outside-the-cluster.md">A Kubernetes dashboard service account was used outside the cluster</a></li><li><a href="/analytics-alerts/alerts-by-name/a-machine-certificate-was-issued-with-a-mismatch.md">A machine certificate was issued with a mismatch</a></li><li><a href="/analytics-alerts/alerts-by-name/a-mail-forwarding-rule-was-configured-in-google-workspace.md">A mail forwarding rule was configured in Google Workspace</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-ad-pim-alert-disabled.md">Azure AD PIM alert disabled</a></li><li><a href="/analytics-alerts/alerts-by-name/cloud-snapshot-of-a-database-or-storage-instance-was-publicly-shared.md">Cloud snapshot of a database or storage instance was publicly shared</a></li><li><a href="/analytics-alerts/alerts-by-name/kubernetes-vulnerability-scanning-tool-usage.md">Kubernetes vulnerability scanning tool usage</a></li><li><a href="/analytics-alerts/alerts-by-name/machine-account-was-added-to-a-domain-admins-group.md">Machine account was added to a domain admins group</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">Penetration testing tool activity</a></li><li><a href="/analytics-alerts/alerts-by-name/service-ticket-request-with-a-spoofed-samaccountname.md">Service ticket request with a spoofed sAMAccountName</a></li><li><a href="/analytics-alerts/alerts-by-name/suspicious-authentication-with-azure-password-hash-sync-user.md">Suspicious authentication with Azure Password Hash Sync user</a></li><li><a href="/analytics-alerts/alerts-by-name/suspicious-heavy-allocation-of-compute-resources-possible-mining-activity.md">Suspicious heavy allocation of compute resources - possible mining activity</a></li><li><a href="/analytics-alerts/alerts-by-name/suspicious-hidden-user-created.md">Suspicious hidden user created</a></li><li><a href="https://app.gitbook.com/o/r4DIGbR5VLvkZy3gAYsu/s/5O67gr80iLneA56jiuO2/alerts-by-name/suspicious-usage-of-ec2-token">Suspicious usage of EC2 token</a></li><li><a href="/analytics-alerts/alerts-by-name/tgt-request-with-a-spoofed-samaccountname-event-log.md">TGT request with a spoofed sAMAccountName - Event log</a></li><li><a href="/analytics-alerts/alerts-by-name/tgt-request-with-a-spoofed-samaccountname-network.md">TGT request with a spoofed sAMAccountName - Network</a></li><li><a href="/analytics-alerts/alerts-by-name/windows-lolbin-executable-connected-to-a-rare-external-host.md">Windows LOLBIN executable connected to a rare external host</a></li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| Improved logic of 6 Medium Analytics Alerts         | <ul><li><a href="/analytics-alerts/alerts-by-name/a-new-machine-attempted-kerberos-delegation.md">A new machine attempted Kerberos delegation</a></li><li><a href="/analytics-alerts/alerts-by-name/kerberos-user-enumeration.md">Kerberos User Enumeration</a></li><li><a href="/analytics-alerts/alerts-by-name/ntlm-hash-harvesting.md">NTLM Hash Harvesting</a></li><li><a href="/analytics-alerts/alerts-by-name/possible-as-rep-roasting-attack.md">Possible AS-REP Roasting Attack</a></li><li><a href="/analytics-alerts/alerts-by-name/possible-kerberoasting-attack.md">Possible Kerberoasting attack</a></li><li><a href="/analytics-alerts/alerts-by-name/random-looking-domain-names.md">Random-Looking Domain Names</a></li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
| Improved logic of 65 Low Analytics BIOCs            | <ul><li><a href="/analytics-alerts/alerts-by-name/a-command-line-interface-cli-command-was-executed-from-a-gcp-serverless-compute-service.md">A Command Line Interface (CLI) command was executed from a GCP serverless compute service</a></li><li><a href="/analytics-alerts/alerts-by-name/a-command-line-interface-cli-command-was-executed-from-an-aws-serverless-compute-service.md">A Command Line Interface (CLI) command was executed from an AWS serverless compute service</a></li><li><a href="/analytics-alerts/alerts-by-name/a-gcp-service-account-was-delegated-domain-wide-authority-in-google-workspace.md">A GCP service account was delegated domain-wide authority in Google Workspace</a></li><li><a href="/analytics-alerts/alerts-by-name/a-cloud-function-was-created-with-an-unusual-runtime.md">A cloud function was created with an unusual runtime</a></li><li><a href="/analytics-alerts/alerts-by-name/a-computer-account-was-promoted-to-dc.md">A computer account was promoted to DC</a></li><li><a href="/analytics-alerts/alerts-by-name/a-disabled-user-attempted-to-log-in-to-a-vpn.md">A disabled user attempted to log in to a VPN</a></li><li><a href="/analytics-alerts/alerts-by-name/a-domain-was-added-to-the-trusted-domains-list.md">A domain was added to the trusted domains list</a></li><li><a href="/analytics-alerts/alerts-by-name/a-process-queried-the-adfs-database-decryption-key-via-ldap.md">A process queried the ADFS database decryption key via LDAP</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-attempted-to-bypass-okta-mfa.md">A user attempted to bypass Okta MFA</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-modified-the-ca-audit-policy.md">A user modified the CA audit policy</a></li><li><a href="/analytics-alerts/alerts-by-name/aws-flow-logs-deletion.md">AWS Flow Logs deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/aws-guard-duty-detector-deletion.md">AWS Guard-Duty detector deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/aws-data-asset-shared-public.md">AWS data asset shared public</a></li><li><a href="/analytics-alerts/alerts-by-name/aws-network-acl-rule-deletion.md">AWS network ACL rule deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/aws-web-acl-deletion.md">AWS web ACL deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/an-azure-firewall-policy-deletion.md">An Azure Firewall policy deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-ad-pim-role-settings-change.md">Azure AD PIM role settings change</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-event-hub-deletion.md">Azure Event Hub Deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-network-watcher-deletion.md">Azure Network Watcher Deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-account-deletion-by-a-non-standard-account.md">Azure account deletion by a non-standard account</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-domain-federation-settings-modification-attempt.md">Azure domain federation settings modification attempt</a></li><li><a href="/analytics-alerts/alerts-by-name/billing-admin-role-was-removed.md">Billing admin role was removed</a></li><li><a href="/analytics-alerts/alerts-by-name/cloudtrail-logging-deletion.md">Cloud Trail logging deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/conditional-access-policy-removed.md">Conditional Access policy removed</a></li><li><a href="/analytics-alerts/alerts-by-name/disable-encryption-operations.md">Disable encryption operations</a></li><li><a href="/analytics-alerts/alerts-by-name/discovery-of-accounts-with-pre-authentication-disabled-via-ldap.md">Discovery of accounts with pre-authentication disabled via LDAP</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">EMAIL BETA - Email was received from an unknown sender using a disposable domain</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">EMAIL BETA - External email display name impersonation of internal personnel</a></li><li><a href="/analytics-alerts/alerts-by-name/exchange-dkim-signing-configuration-disabled.md">Exchange DKIM signing configuration disabled</a></li><li><a href="/analytics-alerts/alerts-by-name/exchange-safe-attachment-policy-disabled-or-removed.md">Exchange Safe Attachment policy disabled or removed</a></li><li><a href="/analytics-alerts/alerts-by-name/exchange-safe-link-policy-disabled-or-removed.md">Exchange Safe Link policy disabled or removed</a></li><li><a href="/analytics-alerts/alerts-by-name/exchange-anti-phish-policy-disabled-or-removed.md">Exchange anti-phish policy disabled or removed</a></li><li><a href="/analytics-alerts/alerts-by-name/exchange-audit-log-disabled.md">Exchange audit log disabled</a></li><li><a href="/analytics-alerts/alerts-by-name/exchange-mailbox-audit-bypass.md">Exchange mailbox audit bypass</a></li><li><a href="/analytics-alerts/alerts-by-name/exchange-malware-filter-policy-removed.md">Exchange malware filter policy removed</a></li><li><a href="/analytics-alerts/alerts-by-name/exchange-transport-forwarding-rule-configured.md">Exchange transport forwarding rule configured</a></li><li><a href="/analytics-alerts/alerts-by-name/exchange-user-mailbox-forwarding.md">Exchange user mailbox forwarding</a></li><li><a href="/analytics-alerts/alerts-by-name/first-azure-ad-powershell-operation-for-a-user.md">First Azure AD PowerShell operation for a user</a></li><li><a href="/analytics-alerts/alerts-by-name/gcp-logging-sink-deletion.md">GCP Logging Sink Deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/interactive-login-by-a-service-account.md">Interactive login by a service account</a></li><li><a href="/analytics-alerts/alerts-by-name/kubernetes-pod-creation-from-unknown-container-image-registry.md">Kubernetes pod creation from unknown container image registry</a></li><li><a href="/analytics-alerts/alerts-by-name/login-attempt-by-a-honey-user.md">Login attempt by a honey user</a></li><li><a href="/analytics-alerts/alerts-by-name/mfa-disabled-for-google-workspace.md">MFA Disabled for Google Workspace</a></li><li><a href="/analytics-alerts/alerts-by-name/mfa-was-disabled-for-an-azure-identity.md">MFA was disabled for an Azure identity</a></li><li><a href="/analytics-alerts/alerts-by-name/masquerading-as-a-default-local-account.md">Masquerading as a default local account</a></li><li><a href="/analytics-alerts/alerts-by-name/okta-reported-attack-suspected.md">Okta Reported Attack Suspected</a></li><li><a href="/analytics-alerts/alerts-by-name/possible-pass-the-hash.md">Possible Pass-the-Hash</a></li><li><a href="/analytics-alerts/alerts-by-name/recurring-access-to-rare-ip.md">Recurring access to rare IP</a></li><li><a href="/analytics-alerts/alerts-by-name/recurring-rare-domain-access-from-an-unsigned-process.md">Recurring rare domain access from an unsigned process</a></li><li><a href="/analytics-alerts/alerts-by-name/remote-usage-of-an-aws-service-token.md">Remote usage of an AWS service token</a></li><li><a href="/analytics-alerts/alerts-by-name/remote-usage-of-an-azure-managed-identity-token.md">Remote usage of an Azure Managed Identity token</a></li><li><a href="/analytics-alerts/alerts-by-name/remote-usage-of-an-azure-service-principal-token.md">Remote usage of an Azure Service Principal token</a></li><li><a href="/analytics-alerts/alerts-by-name/spns-cleared-from-a-machine-account.md">SPNs cleared from a machine account</a></li><li><a href="/analytics-alerts/alerts-by-name/sso-authentication-attempt-by-a-honey-user.md">SSO authentication attempt by a honey user</a></li><li><a href="/analytics-alerts/alerts-by-name/sso-authentication-by-a-machine-account.md">SSO authentication by a machine account</a></li><li><a href="/analytics-alerts/alerts-by-name/sso-authentication-by-a-service-account.md">SSO authentication by a service account</a></li><li><a href="/analytics-alerts/alerts-by-name/scripting-engine-connected-to-a-rare-external-host.md">Scripting engine connected to a rare external host</a></li><li><a href="/analytics-alerts/alerts-by-name/suspicious-print-system-remote-protocol-usage-by-a-process.md">Suspicious Print System Remote Protocol usage by a process</a></li><li><a href="/analytics-alerts/alerts-by-name/suspicious-modification-of-the-adminsdholder-s-acl.md">Suspicious modification of the AdminSDHolder's ACL</a></li><li><a href="/analytics-alerts/alerts-by-name/suspicious-samaccountname-change.md">Suspicious sAMAccountName change</a></li><li><a href="/analytics-alerts/alerts-by-name/unusual-azure-ad-sync-module-load.md">Unusual Azure AD sync module load</a></li><li><a href="/analytics-alerts/alerts-by-name/unusual-cross-projects-activity.md">Unusual cross projects activity</a></li><li><a href="/analytics-alerts/alerts-by-name/user-set-insecure-ca-registry-setting-for-global-sans.md">User set insecure CA registry setting for global SANs</a></li><li><a href="/analytics-alerts/alerts-by-name/vpn-login-attempt-by-a-honey-user.md">VPN login attempt by a honey user</a></li><li><a href="/analytics-alerts/alerts-by-name/vpn-login-by-a-service-account.md">VPN login by a service account</a></li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
| Improved logic of 23 Low Analytics Alerts           | <ul><li><a href="/analytics-alerts/alerts-by-name/a-user-connected-a-new-usb-storage-device-to-multiple-hosts.md">A user connected a new USB storage device to multiple hosts</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-rejected-an-sso-request-from-an-unusual-country.md">A user rejected an SSO request from an unusual country</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-sent-multiple-tgt-requests-to-irregular-service.md">A user sent multiple TGT requests to irregular service</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-uploaded-malware-to-sharepoint-or-onedrive.md">A user uploaded malware to SharePoint or OneDrive</a></li><li><a href="/analytics-alerts/alerts-by-name/account-probing.md">Account probing</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">An identity dumped multiple secrets from a project</a></li><li><a href="/analytics-alerts/alerts-by-name/dns-tunneling.md">DNS Tunneling</a></li><li><a href="/analytics-alerts/alerts-by-name/excessive-user-account-lockouts.md">Excessive user account lockouts</a></li><li><a href="/analytics-alerts/alerts-by-name/failed-dns.md">Failed DNS</a></li><li><a href="/analytics-alerts/alerts-by-name/impossible-traveler-sso.md">Impossible traveler - SSO</a></li><li><a href="/analytics-alerts/alerts-by-name/impossible-traveler-vpn.md">Impossible traveler - VPN</a></li><li><a href="/analytics-alerts/alerts-by-name/interactive-local-account-enumeration.md">Interactive local account enumeration</a></li><li><a href="/analytics-alerts/alerts-by-name/logs-were-not-collected-from-a-data-source-for-an-abnormally-long-time.md">Logs were not collected from a data source for an abnormally long time</a></li><li><a href="/analytics-alerts/alerts-by-name/multiple-azure-ad-admin-role-removals.md">Multiple Azure AD admin role removals</a></li><li><a href="/analytics-alerts/alerts-by-name/multiple-rare-lolbin-process-executions-by-user.md">Multiple Rare LOLBIN Process Executions by User</a></li><li><a href="/analytics-alerts/alerts-by-name/multiple-suspicious-user-accounts-were-created.md">Multiple suspicious user accounts were created</a></li><li><a href="/analytics-alerts/alerts-by-name/ntlm-brute-force-on-a-service-account.md">NTLM Brute Force on a Service Account</a></li><li><a href="/analytics-alerts/alerts-by-name/ntlm-brute-force-on-an-administrator-account.md">NTLM Brute Force on an Administrator Account</a></li><li><a href="/analytics-alerts/alerts-by-name/new-shared-user-account.md">New Shared User Account</a></li><li><a href="/analytics-alerts/alerts-by-name/possible-external-rdp-brute-force.md">Possible external RDP Brute-Force</a></li><li><a href="/analytics-alerts/alerts-by-name/short-lived-user-account.md">Short-lived user account</a></li><li><a href="/analytics-alerts/alerts-by-name/suspicious-identity-downloaded-multiple-objects-from-a-bucket.md">Suspicious identity downloaded multiple objects from a bucket</a></li><li><a href="/analytics-alerts/alerts-by-name/user-collected-remote-shared-files-in-an-archive.md">User collected remote shared files in an archive</a></li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
| Improved logic of 334 Informational Analytics BIOCs | <ul><li><a href="/analytics-alerts/alerts-by-name/a-google-workspace-role-privilege-was-deleted.md">A Google Workspace Role privilege was deleted</a></li><li><a href="/analytics-alerts/alerts-by-name/a-google-workspace-identity-created-assigned-or-modified-a-role.md">A Google Workspace identity created, assigned or modified a role</a></li><li><a href="/analytics-alerts/alerts-by-name/a-google-workspace-identity-performed-an-unusual-admin-console-activity.md">A Google Workspace identity performed an unusual admin console activity</a></li><li><a href="/analytics-alerts/alerts-by-name/a-google-workspace-identity-used-the-security-investigation-tool.md">A Google Workspace identity used the security investigation tool</a></li><li><a href="/analytics-alerts/alerts-by-name/a-google-workspace-service-was-configured-as-unrestricted.md">A Google Workspace service was configured as unrestricted</a></li><li><a href="/analytics-alerts/alerts-by-name/a-google-workspace-user-was-added-to-a-group.md">A Google Workspace user was added to a group</a></li><li><a href="/analytics-alerts/alerts-by-name/a-google-workspace-user-was-removed-from-a-group.md">A Google Workspace user was removed from a group</a></li><li><a href="/analytics-alerts/alerts-by-name/a-kubernetes-configmap-was-created-or-deleted.md">A Kubernetes ConfigMap was created or deleted</a></li><li><a href="/analytics-alerts/alerts-by-name/a-kubernetes-cronjob-was-created.md">A Kubernetes Cronjob was created</a></li><li><a href="/analytics-alerts/alerts-by-name/a-kubernetes-daemonset-was-created.md">A Kubernetes DaemonSet was created</a></li><li><a href="/analytics-alerts/alerts-by-name/a-kubernetes-pod-was-created-with-a-sidecar-container.md">A Kubernetes Pod was created with a sidecar container</a></li><li><a href="/analytics-alerts/alerts-by-name/a-kubernetes-pod-was-deleted.md">A Kubernetes Pod was deleted</a></li><li><a href="/analytics-alerts/alerts-by-name/a-kubernetes-replicaset-was-created.md">A Kubernetes ReplicaSet was created</a></li><li><a href="/analytics-alerts/alerts-by-name/a-kubernetes-statefulset-was-created.md">A Kubernetes StatefulSet was created</a></li><li><a href="/analytics-alerts/alerts-by-name/a-kubernetes-cluster-role-binding-was-created-or-deleted.md">A Kubernetes cluster role binding was created or deleted</a></li><li><a href="/analytics-alerts/alerts-by-name/a-kubernetes-cluster-was-created-or-deleted.md">A Kubernetes cluster was created or deleted</a></li><li><a href="/analytics-alerts/alerts-by-name/a-kubernetes-deployment-was-created.md">A Kubernetes deployment was created</a></li><li><a href="/analytics-alerts/alerts-by-name/a-kubernetes-ephemeral-container-was-created.md">A Kubernetes ephemeral container was created</a></li><li><a href="/analytics-alerts/alerts-by-name/a-kubernetes-namespace-was-created-or-deleted.md">A Kubernetes namespace was created or deleted</a></li><li><a href="/analytics-alerts/alerts-by-name/a-kubernetes-node-service-account-activity-from-external-ip.md">A Kubernetes node service account activity from external IP</a></li><li><a href="/analytics-alerts/alerts-by-name/a-kubernetes-role-binding-was-created-or-deleted.md">A Kubernetes role binding was created or deleted</a></li><li><a href="/analytics-alerts/alerts-by-name/a-kubernetes-secret-was-created-or-deleted.md">A Kubernetes secret was created or deleted</a></li><li><a href="/analytics-alerts/alerts-by-name/a-kubernetes-service-account-executed-an-unusual-api-call.md">A Kubernetes service account executed an unusual API call</a></li><li><a href="/analytics-alerts/alerts-by-name/a-kubernetes-service-account-has-enumerated-its-permissions.md">A Kubernetes service account has enumerated its permissions</a></li><li><a href="/analytics-alerts/alerts-by-name/a-kubernetes-service-account-was-created-or-deleted.md">A Kubernetes service account was created or deleted</a></li><li><a href="/analytics-alerts/alerts-by-name/a-kubernetes-service-was-created-or-deleted.md">A Kubernetes service was created or deleted</a></li><li><a href="/analytics-alerts/alerts-by-name/a-new-server-was-added-to-an-azure-active-directory-hybrid-health-adfs-environment.md">A New Server was Added to an Azure Active Directory Hybrid Health ADFS Environment</a></li><li><a href="/analytics-alerts/alerts-by-name/a-service-principal-was-created-in-azure.md">A Service Principal was created in Azure</a></li><li><a href="/analytics-alerts/alerts-by-name/a-service-principal-was-removed-from-azure.md">A Service Principal was removed from Azure</a></li><li><a href="/analytics-alerts/alerts-by-name/a-browser-was-opened-in-private-mode.md">A browser was opened in private mode</a></li><li><a href="/analytics-alerts/alerts-by-name/a-cloud-identity-created-or-modified-a-security-group.md">A cloud identity created or modified a security group</a></li><li><a href="/analytics-alerts/alerts-by-name/a-cloud-identity-executed-an-api-call-from-an-unusual-country.md">A cloud identity executed an API call from an unusual country</a></li><li><a href="/analytics-alerts/alerts-by-name/a-cloud-identity-had-escalated-its-permissions.md">A cloud identity had escalated its permissions</a></li><li><a href="/analytics-alerts/alerts-by-name/a-cloud-identity-invoked-iam-related-persistence-operations.md">A cloud identity invoked IAM related persistence operations</a></li><li><a href="/analytics-alerts/alerts-by-name/a-cloud-instance-was-stopped.md">A cloud instance was stopped</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">A cloud snapshot was created or modified</a></li><li><a href="/analytics-alerts/alerts-by-name/a-cloud-storage-configuration-was-modified.md">A cloud storage configuration was modified</a></li><li><a href="/analytics-alerts/alerts-by-name/a-compute-attached-identity-executed-api-calls-outside-the-instance-s-region.md">A compute-attached identity executed API calls outside the instance's region</a></li><li><a href="/analytics-alerts/alerts-by-name/a-container-registry-was-created-or-deleted.md">A container registry was created or deleted</a></li><li><a href="/analytics-alerts/alerts-by-name/a-disabled-user-attempted-to-authenticate-via-sso.md">A disabled user attempted to authenticate via SSO</a></li><li><a href="/analytics-alerts/alerts-by-name/a-disabled-user-attempted-to-log-in.md">A disabled user attempted to log in</a></li><li><a href="/analytics-alerts/alerts-by-name/a-possible-risky-login-to-azure.md">A possible risky login to Azure</a></li><li><a href="/analytics-alerts/alerts-by-name/a-process-connected-to-a-rare-external-host.md">A process connected to a rare external host</a></li><li><a href="/analytics-alerts/alerts-by-name/a-rare-local-administrator-login.md">A rare local administrator login</a></li><li><a href="/analytics-alerts/alerts-by-name/a-suspicious-process-queried-ad-cs-objects-via-ldap.md">A suspicious process queried AD CS objects via LDAP</a></li><li><a href="/analytics-alerts/alerts-by-name/a-third-party-application-was-authorized-to-access-the-google-workspace-apis.md">A third-party application was authorized to access the Google Workspace APIs</a></li><li><a href="/analytics-alerts/alerts-by-name/a-third-party-application-s-access-to-the-google-workspace-domain-s-resources-was-revoked.md">A third-party application's access to the Google Workspace domain's resources was revoked</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-accessed-okta-s-admin-application.md">A user accessed Okta's admin application</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-accessed-an-uncommon-appid.md">A user accessed an uncommon AppID</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-account-was-modified-to-password-never-expires.md">A user account was modified to password never expires</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-added-a-windows-firewall-rule.md">A user added a Windows firewall rule</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-certificate-was-issued-with-a-mismatch.md">A user certificate was issued with a mismatch</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-changed-the-windows-system-time.md">A user changed the Windows system time</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-connected-a-usb-storage-device-for-the-first-time.md">A user connected a USB storage device for the first time</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-connected-a-new-usb-storage-device-to-a-host.md">A user connected a new USB storage device to a host</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-connected-from-a-new-country.md">A user connected from a new country</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-connected-to-a-vpn-from-a-new-country.md">A user connected to a VPN from a new country</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-created-a-pfx-file-for-the-first-time.md">A user created a pfx file for the first time</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-created-an-abnormal-password-protected-archive.md">A user created an abnormal password-protected archive</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-enabled-a-default-local-account.md">A user enabled a default local account</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-logged-in-at-an-unusual-time-via-sso.md">A user logged in at an unusual time via SSO</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-logged-in-at-an-unusual-time-via-vpn.md">A user logged in at an unusual time via VPN</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-logged-in-from-an-abnormal-country-or-asn.md">A user logged in from an abnormal country or ASN</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-logged-in-to-the-aws-console-for-the-first-time.md">A user logged in to the AWS console for the first time</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-modified-an-okta-network-zone.md">A user modified an Okta network zone</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-modified-an-okta-policy-rule.md">A user modified an Okta policy rule</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-queried-ad-cs-objects-via-ldap.md">A user queried AD CS objects via LDAP</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-was-added-to-a-windows-security-group.md">A user was added to a Windows security group</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">AWS Cloud Trail log trail modification</a></li><li><a href="/analytics-alerts/alerts-by-name/aws-cloudwatch-log-group-deletion.md">AWS CloudWatch log group deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/aws-cloudwatch-log-stream-deletion.md">AWS CloudWatch log stream deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/aws-config-recorder-stopped.md">AWS Config Recorder stopped</a></li><li><a href="/analytics-alerts/alerts-by-name/aws-ec2-instance-exported-into-s3.md">AWS EC2 instance exported into S3</a></li><li><a href="/analytics-alerts/alerts-by-name/aws-iam-resource-group-deletion.md">AWS IAM resource group deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/aws-rds-cluster-deletion.md">AWS RDS cluster deletion</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">AWS Role Trusted Entity modification</a></li><li><a href="/analytics-alerts/alerts-by-name/aws-root-account-activity.md">AWS Root account activity</a></li><li><a href="/analytics-alerts/alerts-by-name/aws-ssm-send-command-attempt.md">AWS SSM send command attempt</a></li><li><a href="/analytics-alerts/alerts-by-name/aws-sts-temporary-credentials-were-generated.md">AWS STS temporary credentials were generated</a></li><li><a href="/analytics-alerts/alerts-by-name/aws-securityhub-findings-were-modified.md">AWS SecurityHub findings were modified</a></li><li><a href="/analytics-alerts/alerts-by-name/aws-transfer-family-server-created.md">AWS Transfer Family server created</a></li><li><a href="/analytics-alerts/alerts-by-name/aws-config-resource-deletion.md">AWS config resource deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/aws-network-acl-rule-creation.md">AWS network ACL rule creation</a></li><li><a href="/analytics-alerts/alerts-by-name/aws-user-creation.md">AWS user creation</a></li><li><a href="/analytics-alerts/alerts-by-name/abnormal-communication-to-a-rare-domain.md">Abnormal Communication to a Rare Domain</a></li><li><a href="/analytics-alerts/alerts-by-name/abnormal-user-login-to-domain-controller.md">Abnormal User Login to Domain Controller</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">Activity in a dormant region of a cloud project</a></li><li><a href="/analytics-alerts/alerts-by-name/admin-privileges-were-granted-to-a-google-workspace-user.md">Admin privileges were granted to a Google Workspace user</a></li><li><a href="/analytics-alerts/alerts-by-name/an-aws-efs-file-share-mount-was-deleted.md">An AWS EFS File-share mount was deleted</a></li><li><a href="/analytics-alerts/alerts-by-name/an-aws-efs-file-share-was-deleted.md">An AWS EFS file-share was deleted</a></li><li><a href="/analytics-alerts/alerts-by-name/an-aws-eks-cluster-was-created-or-deleted.md">An AWS EKS cluster was created or deleted</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">An AWS ElastiCache security group was created</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">An AWS ElastiCache security group was modified or deleted</a></li><li><a href="/analytics-alerts/alerts-by-name/an-aws-guardduty-ip-set-was-created.md">An AWS GuardDuty IP set was created</a></li><li><a href="/analytics-alerts/alerts-by-name/an-aws-lambda-function-was-created.md">An AWS Lambda Function was created</a></li><li><a href="/analytics-alerts/alerts-by-name/an-aws-lambda-function-was-modified.md">An AWS Lambda function was modified</a></li><li><a href="/analytics-alerts/alerts-by-name/an-aws-rds-global-cluster-deletion.md">An AWS RDS Global Cluster Deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/an-aws-rds-instance-was-created-from-a-snapshot.md">An AWS RDS instance was created from a snapshot</a></li><li><a href="/analytics-alerts/alerts-by-name/an-aws-route-53-domain-was-transferred-to-another-aws-account.md">An AWS Route 53 domain was transferred to another AWS account</a></li><li><a href="/analytics-alerts/alerts-by-name/an-aws-s3-bucket-configuration-was-modified.md">An AWS S3 bucket configuration was modified</a></li><li><a href="/analytics-alerts/alerts-by-name/an-aws-saml-provider-was-modified.md">An AWS SAML provider was modified</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">An AWS SES Email sending settings were modified</a></li><li><a href="/analytics-alerts/alerts-by-name/an-aws-ses-identity-was-deleted.md">An AWS SES identity was deleted</a></li><li><a href="/analytics-alerts/alerts-by-name/an-aws-database-service-master-user-password-was-changed.md">An AWS database service master user password was changed</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">An Azure Cloud Shell was Created</a></li><li><a href="/analytics-alerts/alerts-by-name/an-azure-dns-zone-was-modified.md">An Azure DNS Zone was modified</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">An Azure Firewall Rule Collection was modified</a></li><li><a href="/analytics-alerts/alerts-by-name/an-azure-firewall-was-modified.md">An Azure Firewall was modified</a></li><li><a href="/analytics-alerts/alerts-by-name/an-azure-key-vault-key-was-modified.md">An Azure Key Vault key was modified</a></li><li><a href="/analytics-alerts/alerts-by-name/an-azure-key-vault-was-modified.md">An Azure Key Vault was modified</a></li><li><a href="/analytics-alerts/alerts-by-name/an-azure-kubernetes-cluster-was-created-or-deleted.md">An Azure Kubernetes Cluster was created or deleted</a></li><li><a href="/analytics-alerts/alerts-by-name/an-azure-kubernetes-role-or-cluster-role-was-modified.md">An Azure Kubernetes Role or Cluster-Role was modified</a></li><li><a href="/analytics-alerts/alerts-by-name/an-azure-kubernetes-role-binding-or-cluster-role-binding-was-modified-or-deleted.md">An Azure Kubernetes Role-Binding or Cluster-Role-Binding was modified or deleted</a></li><li><a href="/analytics-alerts/alerts-by-name/an-azure-kubernetes-service-account-was-modified-or-deleted.md">An Azure Kubernetes Service Account was modified or deleted</a></li><li><a href="/analytics-alerts/alerts-by-name/an-azure-network-security-group-was-modified.md">An Azure Network Security Group was modified</a></li><li><a href="/analytics-alerts/alerts-by-name/an-azure-point-to-site-vpn-was-modified.md">An Azure Point-to-Site VPN was modified</a></li><li><a href="/analytics-alerts/alerts-by-name/an-azure-suppression-rule-was-created.md">An Azure Suppression Rule was created</a></li><li><a href="/analytics-alerts/alerts-by-name/an-azure-vpn-connection-was-modified.md">An Azure VPN Connection was modified</a></li><li><a href="/analytics-alerts/alerts-by-name/an-azure-application-reached-a-throttling-api-rate.md">An Azure application reached a throttling API rate</a></li><li><a href="/analytics-alerts/alerts-by-name/an-azure-firewall-rule-group-was-modified.md">An Azure firewall rule group was modified</a></li><li><a href="/analytics-alerts/alerts-by-name/an-azure-virtual-network-device-was-modified.md">An Azure virtual network Device was modified</a></li><li><a href="/analytics-alerts/alerts-by-name/an-azure-virtual-network-was-modified.md">An Azure virtual network was modified</a></li><li><a href="/analytics-alerts/alerts-by-name/an-email-address-was-added-to-aws-ses.md">An Email address was added to AWS SES</a></li><li><a href="/analytics-alerts/alerts-by-name/an-iam-group-was-created.md">An IAM group was created</a></li><li><a href="/analytics-alerts/alerts-by-name/an-app-was-added-to-google-marketplace.md">An app was added to Google Marketplace</a></li><li><a href="/analytics-alerts/alerts-by-name/an-app-was-added-to-the-google-workspace-trusted-oauth-apps-list.md">An app was added to the Google Workspace trusted OAuth apps list</a></li><li><a href="/analytics-alerts/alerts-by-name/an-app-was-removed-from-a-blocked-list-in-google-workspace.md">An app was removed from a blocked list in Google Workspace</a></li><li><a href="/analytics-alerts/alerts-by-name/an-identity-accessed-azure-kubernetes-secrets.md">An identity accessed Azure Kubernetes Secrets</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">An identity attached an administrative policy to an IAM user/role</a></li><li><a href="/analytics-alerts/alerts-by-name/an-identity-created-or-updated-password-for-an-iam-user.md">An identity created or updated password for an IAM user</a></li><li><a href="/analytics-alerts/alerts-by-name/an-identity-disabled-bucket-logging.md">An identity disabled bucket logging</a></li><li><a href="/analytics-alerts/alerts-by-name/an-identity-started-an-aws-ssm-session.md">An identity started an AWS SSM session</a></li><li><a href="/analytics-alerts/alerts-by-name/an-identity-was-granted-permissions-to-manage-user-access-to-azure-resources.md">An identity was granted permissions to manage user access to Azure resources</a></li><li><a href="/analytics-alerts/alerts-by-name/an-operation-was-performed-by-an-identity-from-a-domain-that-was-not-seen-in-the-organization.md">An operation was performed by an identity from a domain that was not seen in the organization</a></li><li><a href="/analytics-alerts/alerts-by-name/an-unusual-archive-file-creation-by-a-user.md">An unusual archive file creation by a user</a></li><li><a href="/analytics-alerts/alerts-by-name/attempted-azure-application-access-from-unknown-tenant.md">Attempted Azure application access from unknown tenant</a></li><li><a href="/analytics-alerts/alerts-by-name/aurora-db-cluster-stopped.md">Aurora DB cluster stopped</a></li><li><a href="/analytics-alerts/alerts-by-name/authentication-method-added-to-an-azure-account.md">Authentication method added to an Azure account</a></li><li><a href="/analytics-alerts/alerts-by-name/authentication-method-was-added-to-azure-account.md">Authentication method was added to Azure account</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-ad-pim-elevation-request.md">Azure AD PIM elevation request</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-ad-account-unlock-password-reset-attempt.md">Azure AD account unlock/password reset attempt</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-automation-account-creation.md">Azure Automation Account Creation</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-automation-runbook-creation-modification.md">Azure Automation Runbook Creation/Modification</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-automation-runbook-deletion.md">Azure Automation Runbook Deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-automation-webhook-creation.md">Azure Automation Webhook creation</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-blob-container-access-level-modification.md">Azure Blob Container Access Level Modification</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-event-hub-authorization-rule-creation-modification.md">Azure Event Hub Authorization rule creation/modification</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-key-vault-secrets-were-modified.md">Azure Key Vault Secrets were modified</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-key-vault-modification.md">Azure Key Vault modification</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-kubernetes-events-were-deleted.md">Azure Kubernetes events were deleted</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-resource-group-deletion.md">Azure Resource Group Deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-service-principal-application-creation.md">Azure Service principal/Application creation</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-storage-account-key-generated.md">Azure Storage Account key generated</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-temporary-access-pass-tap-registered-to-an-account.md">Azure Temporary Access Pass (TAP) registered to an account</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-account-creation-by-a-non-standard-account.md">Azure account creation by a non-standard account</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-application-uri-modification.md">Azure application URI modification</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-application-consent.md">Azure application consent</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-application-credentials-added.md">Azure application credentials added</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-application-removed.md">Azure application removed</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">Azure audit - MFA fraud reported</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-conditional-access-policy-creation-or-modification.md">Azure conditional access policy creation or modification</a></li><li><a href="https://app.gitbook.com/o/r4DIGbR5VLvkZy3gAYsu/s/5O67gr80iLneA56jiuO2/alerts-by-name/azure-device-code-authentication-flow-used">Azure device code authentication flow used</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-diagnostic-configuration-deletion.md">Azure diagnostic configuration deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-group-creation-deletion.md">Azure group creation/deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-mailbox-rule-creation.md">Azure mailbox rule creation</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-permission-delegation-granted.md">Azure permission delegation granted</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-service-principal-assigned-app-role.md">Azure service principal assigned app role</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-storage-account-blob-anonymous-access-is-enabled.md">Azure storage account blob anonymous access is enabled</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-storage-account-cross-tenant-object-replication-was-enabled.md">Azure storage account cross-tenant object replication was enabled</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-storage-account-was-publicly-shared.md">Azure storage account was publicly shared</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-user-creation-deletion.md">Azure user creation/deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-user-password-reset.md">Azure user password reset</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-virtual-machine-commands-execution.md">Azure virtual machine commands execution</a></li><li><a href="/analytics-alerts/alerts-by-name/bitlocker-key-retrieval.md">BitLocker key retrieval</a></li><li><a href="/analytics-alerts/alerts-by-name/cloud-organizational-policy-was-created-or-modified.md">Cloud Organizational policy was created or modified</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">Cloud Trail Logging has been stopped/suspended</a></li><li><a href="/analytics-alerts/alerts-by-name/cloud-watch-alarm-deletion.md">Cloud Watch alarm deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/cloud-compute-instance-user-data-script-modification.md">Cloud compute instance user data script modification</a></li><li><a href="/analytics-alerts/alerts-by-name/cloud-compute-serial-console-access.md">Cloud compute serial console access</a></li><li><a href="/analytics-alerts/alerts-by-name/cloud-email-service-activity.md">Cloud email service activity</a></li><li><a href="/analytics-alerts/alerts-by-name/cloud-identity-reached-a-throttling-api-rate.md">Cloud identity reached a throttling API rate</a></li><li><a href="/analytics-alerts/alerts-by-name/cloud-impersonation-attempt-by-unusual-identity-type.md">Cloud impersonation attempt by unusual identity type</a></li><li><a href="/analytics-alerts/alerts-by-name/cloud-storage-automatic-backup-disabled.md">Cloud storage automatic backup disabled</a></li><li><a href="/analytics-alerts/alerts-by-name/cloud-storage-delete-protection-disabled.md">Cloud storage delete protection disabled</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">Cloud unusual access key creation</a></li><li><a href="/analytics-alerts/alerts-by-name/credentials-were-added-to-azure-application.md">Credentials were added to Azure application</a></li><li><a href="/analytics-alerts/alerts-by-name/dlp-sensitive-data-exposed-to-external-users.md">DLP sensitive data exposed to external users</a></li><li><a href="/analytics-alerts/alerts-by-name/data-sharing-between-gcp-and-google-workspace-was-disabled.md">Data Sharing between GCP and Google Workspace was disabled</a></li><li><a href="/analytics-alerts/alerts-by-name/data-encryption-was-disabled.md">Data encryption was disabled</a></li><li><a href="/analytics-alerts/alerts-by-name/deletion-of-ad-cs-certificate-database-entries.md">Deletion of AD CS certificate database entries</a></li><li><a href="/analytics-alerts/alerts-by-name/denied-api-call-by-a-kubernetes-service-account.md">Denied API call by a Kubernetes service account</a></li><li><a href="/analytics-alerts/alerts-by-name/device-registration-policy-modification.md">Device Registration Policy modification</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">EC2 snapshot attribute has been modified</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">EMAIL BETA - Email attachment with a potentially malicious file extension</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">EMAIL BETA - Email attachment(s) with potentially malicious MIME type</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">EMAIL BETA - Email containing a redirected link</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">EMAIL BETA - Email has a short body or subject and was sent from an external source</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">EMAIL BETA - Email was received from an unknown sender using a public provider domain</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">EMAIL BETA - Email was received from an unknown sender using a recognized domain</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">EMAIL BETA - Suspicious Unicode character detected in email</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">EMAIL BETA - Usage of homograph characters detected in an email</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">EMAIL BETA - Well-known brand impersonation within an email's from address domain</a></li><li><a href="/analytics-alerts/alerts-by-name/exchange-compliance-search-created.md">Exchange compliance search created</a></li><li><a href="/analytics-alerts/alerts-by-name/exchange-email-hiding-inbox-rule.md">Exchange email-hiding inbox rule</a></li><li><a href="/analytics-alerts/alerts-by-name/exchange-email-hiding-transport-rule.md">Exchange email-hiding transport rule</a></li><li><a href="/analytics-alerts/alerts-by-name/exchange-inbox-forwarding-rule-configured.md">Exchange inbox forwarding rule configured</a></li><li><a href="/analytics-alerts/alerts-by-name/exchange-mailbox-folder-permission-modification.md">Exchange mailbox folder permission modification</a></li><li><a href="/analytics-alerts/alerts-by-name/external-sharing-was-turned-on-for-google-drive.md">External Sharing was turned on for Google Drive</a></li><li><a href="/analytics-alerts/alerts-by-name/external-user-invitation-to-azure-tenant.md">External user invitation to Azure tenant</a></li><li><a href="/analytics-alerts/alerts-by-name/first-sso-resource-access-in-the-organization.md">First SSO Resource Access in the Organization</a></li><li><a href="/analytics-alerts/alerts-by-name/first-sso-access-from-asn-for-user.md">First SSO access from ASN for user</a></li><li><a href="/analytics-alerts/alerts-by-name/first-sso-access-from-asn-in-organization.md">First SSO access from ASN in organization</a></li><li><a href="/analytics-alerts/alerts-by-name/first-vpn-access-attempt-from-a-country-in-organization.md">First VPN access attempt from a country in organization</a></li><li><a href="/analytics-alerts/alerts-by-name/first-vpn-access-from-asn-for-user.md">First VPN access from ASN for user</a></li><li><a href="/analytics-alerts/alerts-by-name/first-vpn-access-from-asn-in-organization.md">First VPN access from ASN in organization</a></li><li><a href="/analytics-alerts/alerts-by-name/first-connection-from-a-country-in-organization.md">First connection from a country in organization</a></li><li><a href="/analytics-alerts/alerts-by-name/gcp-firewall-rule-modification.md">GCP Firewall Rule Modification</a></li><li><a href="/analytics-alerts/alerts-by-name/gcp-firewall-rule-creation.md">GCP Firewall Rule creation</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">GCP IAM Custom Role Creation</a></li><li><a href="/analytics-alerts/alerts-by-name/gcp-iam-role-deletion.md">GCP IAM Role Deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/gcp-iam-service-account-key-deletion.md">GCP IAM Service Account Key Deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/gcp-logging-bucket-deletion.md">GCP Logging Bucket Deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/gcp-logging-sink-modification.md">GCP Logging Sink Modification</a></li><li><a href="/analytics-alerts/alerts-by-name/gcp-pub-sub-subscription-deletion.md">GCP Pub/Sub Subscription Deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/gcp-pub-sub-topic-deletion.md">GCP Pub/Sub Topic Deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/gcp-service-account-disable.md">GCP Service Account Disable</a></li><li><a href="/analytics-alerts/alerts-by-name/gcp-service-account-creation.md">GCP Service Account creation</a></li><li><a href="/analytics-alerts/alerts-by-name/gcp-service-account-deletion.md">GCP Service Account deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/gcp-service-account-key-creation.md">GCP Service Account key creation</a></li><li><a href="/analytics-alerts/alerts-by-name/gcp-storage-bucket-configuration-modification.md">GCP Storage Bucket Configuration Modification</a></li><li><a href="/analytics-alerts/alerts-by-name/gcp-storage-bucket-permissions-modification.md">GCP Storage Bucket Permissions Modification</a></li><li><a href="/analytics-alerts/alerts-by-name/gcp-storage-bucket-deletion.md">GCP Storage Bucket deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/gcp-vpc-firewall-rule-deletion.md">GCP VPC Firewall Rule Deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/gcp-virtual-private-cloud-vpc-network-deletion.md">GCP Virtual Private Cloud (VPC) Network Deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/gcp-virtual-private-network-route-creation.md">GCP Virtual Private Network Route Creation</a></li><li><a href="/analytics-alerts/alerts-by-name/gcp-virtual-private-network-route-deletion.md">GCP Virtual Private Network Route Deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/gcp-set-iam-policy-activity.md">GCP set IAM policy activity</a></li><li><a href="/analytics-alerts/alerts-by-name/gmail-delegation-was-turned-on-for-the-organization.md">Gmail delegation was turned on for the organization</a></li><li><a href="/analytics-alerts/alerts-by-name/gmail-routing-settings-changed.md">Gmail routing settings changed</a></li><li><a href="/analytics-alerts/alerts-by-name/google-marketplace-restrictions-were-modified.md">Google Marketplace restrictions were modified</a></li><li><a href="/analytics-alerts/alerts-by-name/google-workspace-organizational-unit-was-modified.md">Google Workspace organizational unit was modified</a></li><li><a href="/analytics-alerts/alerts-by-name/google-workspace-third-party-application-s-security-settings-were-changed.md">Google Workspace third-party application's security settings were changed</a></li><li><a href="/analytics-alerts/alerts-by-name/granting-access-to-an-account.md">Granting Access to an Account</a></li><li><a href="/analytics-alerts/alerts-by-name/iam-user-added-to-an-iam-group.md">IAM User added to an IAM group</a></li><li><a href="/analytics-alerts/alerts-by-name/identity-assigned-an-azure-ad-administrator-role.md">Identity assigned an Azure AD Administrator Role</a></li><li><a href="/analytics-alerts/alerts-by-name/interactive-login-by-a-machine-account.md">Interactive login by a machine account</a></li><li><a href="/analytics-alerts/alerts-by-name/interactive-login-from-a-shared-user-account.md">Interactive login from a shared user account</a></li><li><a href="/analytics-alerts/alerts-by-name/kubernetes-pod-created-with-sensitive-volume.md">Kubernetes Pod Created With Sensitive Volume</a></li><li><a href="/analytics-alerts/alerts-by-name/kubernetes-pod-created-with-host-inter-process-communications-ipc-namespace.md">Kubernetes Pod Created with host Inter Process Communications (IPC) namespace</a></li><li><a href="/analytics-alerts/alerts-by-name/kubernetes-pod-created-with-host-process-id-pid-namespace.md">Kubernetes Pod created with host process ID (PID) namespace</a></li><li><a href="/analytics-alerts/alerts-by-name/kubernetes-privileged-pod-creation.md">Kubernetes Privileged Pod Creation</a></li><li><a href="/analytics-alerts/alerts-by-name/kubernetes-admission-controller-activity.md">Kubernetes admission controller activity</a></li><li><a href="/analytics-alerts/alerts-by-name/kubernetes-cluster-events-deletion.md">Kubernetes cluster events deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/kubernetes-network-policy-modification.md">Kubernetes network policy modification</a></li><li><a href="/analytics-alerts/alerts-by-name/kubernetes-pod-creation-with-host-network.md">Kubernetes pod creation with host network</a></li><li><a href="/analytics-alerts/alerts-by-name/kubernetes-service-account-activity-outside-the-cluster.md">Kubernetes service account activity outside the cluster</a></li><li><a href="/analytics-alerts/alerts-by-name/local-user-account-creation.md">Local user account creation</a></li><li><a href="/analytics-alerts/alerts-by-name/login-by-a-dormant-user.md">Login by a dormant user</a></li><li><a href="/analytics-alerts/alerts-by-name/mfa-device-was-removed-deactivated-from-an-iam-user.md">MFA device was removed/deactivated from an IAM user</a></li><li><a href="/analytics-alerts/alerts-by-name/member-added-to-a-windows-local-security-group.md">Member added to a Windows local security group</a></li><li><a href="/analytics-alerts/alerts-by-name/microsoft-365-dlp-policy-disabled-or-removed.md">Microsoft 365 DLP policy disabled or removed</a></li><li><a href="/analytics-alerts/alerts-by-name/modification-or-deletion-of-an-azure-application-gateway-detected.md">Modification or Deletion of an Azure Application Gateway Detected</a></li><li><a href="/analytics-alerts/alerts-by-name/network-sniffing-detected-in-cloud-environment.md">Network sniffing detected in Cloud environment</a></li><li><a href="/analytics-alerts/alerts-by-name/object-versioning-was-disabled.md">Object versioning was disabled</a></li><li><a href="/analytics-alerts/alerts-by-name/okta-api-token-created.md">Okta API Token Created</a></li><li><a href="/analytics-alerts/alerts-by-name/okta-user-session-impersonation.md">Okta User Session Impersonation</a></li><li><a href="/analytics-alerts/alerts-by-name/okta-account-unlock-by-admin.md">Okta account unlock by admin</a></li><li><a href="/analytics-alerts/alerts-by-name/okta-admin-privilege-assignment.md">Okta admin privilege assignment</a></li><li><a href="/analytics-alerts/alerts-by-name/onedrive-file-download.md">OneDrive file download</a></li><li><a href="/analytics-alerts/alerts-by-name/onedrive-file-upload.md">OneDrive file upload</a></li><li><a href="/analytics-alerts/alerts-by-name/onedrive-folder-creation.md">OneDrive folder creation</a></li><li><a href="/analytics-alerts/alerts-by-name/owner-added-to-azure-application.md">Owner added to Azure application</a></li><li><a href="/analytics-alerts/alerts-by-name/owner-was-added-to-azure-application.md">Owner was added to Azure application</a></li><li><a href="/analytics-alerts/alerts-by-name/pim-privilege-member-removal.md">PIM privilege member removal</a></li><li><a href="/analytics-alerts/alerts-by-name/penetration-testing-tool-activity-attempt.md">Penetration testing tool activity attempt</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">Penetration testing tool attempt</a></li><li><a href="/analytics-alerts/alerts-by-name/possible-gpo-enumeration.md">Possible GPO Enumeration</a></li><li><a href="/analytics-alerts/alerts-by-name/possible-ldap-enumeration-tool-usage.md">Possible LDAP Enumeration Tool Usage</a></li><li><a href="/analytics-alerts/alerts-by-name/possible-ldap-enumeration-of-microsoft-configuration-manager.md">Possible LDAP Enumeration of Microsoft Configuration Manager</a></li><li><a href="/analytics-alerts/alerts-by-name/possible-spn-enumeration.md">Possible SPN enumeration</a></li><li><a href="/analytics-alerts/alerts-by-name/potential-okta-access-limit-breach.md">Potential Okta access limit breach</a></li><li><a href="/analytics-alerts/alerts-by-name/privileged-role-used-by-azure-application.md">Privileged role used by Azure application</a></li><li><a href="/analytics-alerts/alerts-by-name/rare-appid-usage-to-a-rare-destination.md">Rare AppID usage to a rare destination</a></li><li><a href="/analytics-alerts/alerts-by-name/rare-dlp-rule-match-by-user.md">Rare DLP rule match by user</a></li><li><a href="/analytics-alerts/alerts-by-name/rare-lolbin-process-execution-by-user.md">Rare LOLBIN Process Execution by User</a></li><li><a href="/analytics-alerts/alerts-by-name/rare-ntlm-access-by-user-to-host.md">Rare NTLM Access By User To Host</a></li><li><a href="/analytics-alerts/alerts-by-name/rare-ntlm-usage-by-user.md">Rare NTLM Usage by User</a></li><li><a href="/analytics-alerts/alerts-by-name/rare-machine-account-creation.md">Rare machine account creation</a></li><li><a href="/analytics-alerts/alerts-by-name/rare-process-execution-by-user.md">Rare process execution by user</a></li><li><a href="/analytics-alerts/alerts-by-name/rare-process-execution-in-organization.md">Rare process execution in organization</a></li><li><a href="/analytics-alerts/alerts-by-name/remote-usage-of-aws-lambda-s-role.md">Remote usage of AWS Lambda's role</a></li><li><a href="/analytics-alerts/alerts-by-name/remote-usage-of-vm-service-account-token.md">Remote usage of VM Service Account token</a></li><li><a href="/analytics-alerts/alerts-by-name/remote-usage-of-an-app-engine-service-account-token.md">Remote usage of an App engine Service Account token</a></li><li><a href="/analytics-alerts/alerts-by-name/removal-of-an-azure-owner-from-an-application-or-service-principal.md">Removal of an Azure Owner from an Application or Service Principal</a></li><li><a href="/analytics-alerts/alerts-by-name/s3-configuration-deletion.md">S3 configuration deletion</a></li><li><a href="/analytics-alerts/alerts-by-name/sso-with-abnormal-operating-system.md">SSO with abnormal operating system</a></li><li><a href="/analytics-alerts/alerts-by-name/sso-with-abnormal-user-agent.md">SSO with abnormal user agent</a></li><li><a href="/analytics-alerts/alerts-by-name/sso-with-new-operating-system.md">SSO with new operating system</a></li><li><a href="/analytics-alerts/alerts-by-name/saas-suspicious-external-domain-user-activity.md">SaaS suspicious external domain user activity</a></li><li><a href="/analytics-alerts/alerts-by-name/sensitive-account-password-reset-attempt.md">Sensitive account password reset attempt</a></li><li><a href="/analytics-alerts/alerts-by-name/sharepoint-site-collection-admin-group-addition.md">SharePoint Site Collection admin group addition</a></li><li><a href="/analytics-alerts/alerts-by-name/soft-delete-of-cloud-storage-configuration-was-disabled.md">Soft delete of cloud storage configuration was disabled</a></li><li><a href="/analytics-alerts/alerts-by-name/successful-unusual-guest-user-invitation.md">Successful unusual guest user invitation</a></li><li><a href="/analytics-alerts/alerts-by-name/suspicious-azure-ad-interactive-sign-in-using-powershell.md">Suspicious Azure AD interactive sign-in using PowerShell</a></li><li><a href="/analytics-alerts/alerts-by-name/suspicious-external-rdp-login.md">Suspicious External RDP Login</a></li><li><a href="/analytics-alerts/alerts-by-name/suspicious-ntlm-authentication-with-machine-account.md">Suspicious NTLM authentication with machine account</a></li><li><a href="/analytics-alerts/alerts-by-name/suspicious-sso-access-from-asn.md">Suspicious SSO access from ASN</a></li><li><a href="/analytics-alerts/alerts-by-name/suspicious-sso-authentication.md">Suspicious SSO authentication</a></li><li><a href="/analytics-alerts/alerts-by-name/suspicious-cloud-compute-instance-ssh-keys-modification-attempt.md">Suspicious cloud compute instance ssh keys modification attempt</a></li><li><a href="/analytics-alerts/alerts-by-name/suspicious-domain-user-account-creation.md">Suspicious domain user account creation</a></li><li><a href="/analytics-alerts/alerts-by-name/unusual-aws-systems-manager-activity.md">Unusual AWS systems manager activity</a></li><li><a href="/analytics-alerts/alerts-by-name/unusual-conditional-access-operation-for-an-identity.md">Unusual Conditional Access operation for an identity</a></li><li><a href="/analytics-alerts/alerts-by-name/unusual-iam-enumeration-activity-by-a-non-user-identity.md">Unusual IAM enumeration activity by a non-user Identity</a></li><li><a href="/analytics-alerts/alerts-by-name/unusual-identity-and-access-management-iam-activity.md">Unusual Identity and Access Management (IAM) activity</a></li><li><a href="/analytics-alerts/alerts-by-name/unusual-certificate-management-activity.md">Unusual certificate management activity</a></li><li><a href="/analytics-alerts/alerts-by-name/unusual-cloud-identity-impersonation.md">Unusual cloud identity impersonation</a></li><li><a href="/analytics-alerts/alerts-by-name/unusual-exec-into-a-kubernetes-pod.md">Unusual exec into a Kubernetes Pod</a></li><li><a href="/analytics-alerts/alerts-by-name/unusual-key-management-activity.md">Unusual key management activity</a></li><li><a href="/analytics-alerts/alerts-by-name/unusual-resource-access-by-azure-application.md">Unusual resource access by Azure application</a></li><li><a href="/analytics-alerts/alerts-by-name/unusual-resource-modification-by-newly-seen-iam-user.md">Unusual resource modification by newly seen IAM user</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">Unusual resource modification/creation</a></li><li><a href="/analytics-alerts/alerts-by-name/unusual-secret-management-activity.md">Unusual secret management activity</a></li><li><a href="/analytics-alerts/alerts-by-name/unusual-user-account-enablement.md">Unusual user account enablement</a></li><li><a href="/analytics-alerts/alerts-by-name/unusual-user-account-unlock.md">Unusual user account unlock</a></li><li><a href="/analytics-alerts/alerts-by-name/unusual-weak-authentication-by-user.md">Unusual weak authentication by user</a></li><li><a href="/analytics-alerts/alerts-by-name/unverified-domain-added-to-azure-ad.md">Unverified domain added to Azure AD</a></li><li><a href="/analytics-alerts/alerts-by-name/user-accessed-saas-resource-via-anonymous-link.md">User accessed SaaS resource via anonymous link</a></li><li><a href="/analytics-alerts/alerts-by-name/user-account-delegation-change.md">User account delegation change</a></li><li><a href="/analytics-alerts/alerts-by-name/user-added-sid-history-to-an-account.md">User added SID History to an account</a></li><li><a href="/analytics-alerts/alerts-by-name/user-added-a-new-device-to-okta-verify-instance.md">User added a new device to Okta Verify instance</a></li><li><a href="/analytics-alerts/alerts-by-name/user-attempted-to-connect-from-a-suspicious-country.md">User attempted to connect from a suspicious country</a></li><li><a href="/analytics-alerts/alerts-by-name/vpn-access-with-an-abnormal-operating-system.md">VPN access with an abnormal operating system</a></li><li><a href="/analytics-alerts/alerts-by-name/vpn-login-by-a-dormant-user.md">VPN login by a dormant user</a></li><li><a href="/analytics-alerts/alerts-by-name/vpn-login-with-a-machine-account.md">VPN login with a machine account</a></li></ul> |
| Improved logic of 72 Informational Analytics Alerts | <ul><li><a href="/analytics-alerts/alerts-by-name/a-user-accessed-an-abnormal-number-of-files-on-a-remote-shared-folder.md">A user accessed an abnormal number of files on a remote shared folder</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-accessed-an-abnormal-number-of-remote-shared-folders.md">A user accessed an abnormal number of remote shared folders</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-accessed-multiple-time-consuming-websites.md">A user accessed multiple time-consuming websites</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-accessed-multiple-unusual-resources-via-sso.md">A user accessed multiple unusual resources via SSO</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-authenticated-with-weak-ntlm-to-multiple-hosts.md">A user authenticated with weak NTLM to multiple hosts</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-established-an-smb-connection-to-multiple-hosts.md">A user established an SMB connection to multiple hosts</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-executed-multiple-ldap-enumeration-queries.md">A user executed multiple LDAP enumeration queries</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-logged-on-to-multiple-workstations-via-schannel.md">A user logged on to multiple workstations via Schannel</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-observed-and-reported-unusual-activity-in-okta.md">A user observed and reported unusual activity in Okta</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-performed-suspiciously-massive-file-activity.md">A user performed suspiciously massive file activity</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-printed-an-unusual-number-of-files.md">A user printed an unusual number of files</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-received-multiple-weakly-encrypted-service-tickets.md">A user received multiple weakly encrypted service tickets</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-requested-multiple-service-tickets.md">A user requested multiple service tickets</a></li><li><a href="/analytics-alerts/alerts-by-name/a-user-took-numerous-screenshots.md">A user took numerous screenshots</a></li><li><a href="/analytics-alerts/alerts-by-name/abnormal-allocation-of-compute-resources-in-multiple-regions.md">Abnormal Allocation of compute resources in multiple regions</a></li><li><a href="/analytics-alerts/alerts-by-name/allocation-of-multiple-cloud-compute-resources.md">Allocation of multiple cloud compute resources</a></li><li><a href="/analytics-alerts/alerts-by-name/an-azure-identity-performed-multiple-actions-that-were-denied.md">An Azure identity performed multiple actions that were denied</a></li><li><a href="/analytics-alerts/alerts-by-name/an-identity-performed-a-suspicious-download-of-multiple-cloud-storage-objects.md">An identity performed a suspicious download of multiple cloud storage objects</a></li><li><a href="/analytics-alerts/alerts-by-name/azure-enumeration-activity-using-microsoft-graph-api.md">Azure enumeration activity using Microsoft Graph API</a></li><li><a href="https://cortex-docs.paloaltonetworks.com/analytics-alerts/">Azure uncommon increase in API request sizes</a></li><li><a href="/analytics-alerts/alerts-by-name/brute-force-attempt-on-a-local-account.md">Brute-force attempt on a local account</a></li><li><a href="/analytics-alerts/alerts-by-name/cloud-infrastructure-enumeration-activity.md">Cloud infrastructure enumeration activity</a></li><li><a href="/analytics-alerts/alerts-by-name/cloud-user-performed-multiple-actions-that-were-denied.md">Cloud user performed multiple actions that were denied</a></li><li><a href="/analytics-alerts/alerts-by-name/deletion-of-multiple-cloud-resources.md">Deletion of multiple cloud resources</a></li><li><a href="/analytics-alerts/alerts-by-name/exchange-mailbox-delegation-permissions-added.md">Exchange mailbox delegation permissions added</a></li><li><a href="/analytics-alerts/alerts-by-name/external-login-password-spray.md">External Login Password Spray</a></li><li><a href="/analytics-alerts/alerts-by-name/external-saas-file-sharing-activity.md">External SaaS file-sharing activity</a></li><li><a href="/analytics-alerts/alerts-by-name/iam-enumeration-sequence.md">IAM Enumeration sequence</a></li><li><a href="/analytics-alerts/alerts-by-name/increase-in-job-related-site-visits.md">Increase in Job-Related Site Visits</a></li><li><a href="/analytics-alerts/alerts-by-name/intense-sso-failures.md">Intense SSO failures</a></li><li><a href="/analytics-alerts/alerts-by-name/internal-login-password-spray.md">Internal Login Password Spray</a></li><li><a href="/analytics-alerts/alerts-by-name/kubernetes-enumeration-activity.md">Kubernetes enumeration activity</a></li><li><a href="/analytics-alerts/alerts-by-name/mailbox-enumeration-activity-by-azure-application.md">Mailbox enumeration activity by Azure application</a></li><li><a href="/analytics-alerts/alerts-by-name/massive-file-activity-abnormal-to-process.md">Massive file activity abnormal to process</a></li><li><a href="/analytics-alerts/alerts-by-name/massive-file-compression-by-user.md">Massive file compression by user</a></li><li><a href="/analytics-alerts/alerts-by-name/massive-file-downloads-from-saas-service.md">Massive file downloads from SaaS service</a></li><li><a href="/analytics-alerts/alerts-by-name/massive-upload-to-saas-service.md">Massive upload to SaaS service</a></li><li><a href="/analytics-alerts/alerts-by-name/massive-upload-to-a-rare-storage-or-mail-domain.md">Massive upload to a rare storage or mail domain</a></li><li><a href="/analytics-alerts/alerts-by-name/microsoft-onedrive-enumeration-activity.md">Microsoft OneDrive enumeration activity</a></li><li><a href="/analytics-alerts/alerts-by-name/microsoft-onenote-enumeration-activity.md">Microsoft OneNote enumeration activity</a></li><li><a href="/analytics-alerts/alerts-by-name/microsoft-sharepoint-enumeration-activity.md">Microsoft SharePoint enumeration activity</a></li><li><a href="/analytics-alerts/alerts-by-name/microsoft-teams-enumeration-activity.md">Microsoft Teams enumeration activity</a></li><li><a href="/analytics-alerts/alerts-by-name/multi-region-enumeration-activity.md">Multi region enumeration activity</a></li><li><a href="/analytics-alerts/alerts-by-name/multiple-okta-mfa-requests-sent-to-a-user.md">Multiple Okta MFA requests sent to a user</a></li><li><a href="/analytics-alerts/alerts-by-name/multiple-rare-process-executions-in-organization.md">Multiple Rare Process Executions in Organization</a></li><li><a href="/analytics-alerts/alerts-by-name/multiple-tgt-requests-for-users-without-kerberos-pre-authentication.md">Multiple TGT requests for users without Kerberos pre-authentication</a></li><li><a href="/analytics-alerts/alerts-by-name/multiple-cloud-snapshots-export.md">Multiple cloud snapshots export</a></li><li><a href="/analytics-alerts/alerts-by-name/multiple-failed-logins-from-a-single-ip.md">Multiple failed logins from a single IP</a></li><li><a href="/analytics-alerts/alerts-by-name/multiple-user-accounts-were-deleted.md">Multiple user accounts were deleted</a></li><li><a href="/analytics-alerts/alerts-by-name/multiple-users-authenticated-with-weak-ntlm-to-a-host.md">Multiple users authenticated with weak NTLM to a host</a></li><li><a href="/analytics-alerts/alerts-by-name/ntlm-brute-force.md">NTLM Brute Force</a></li><li><a href="/analytics-alerts/alerts-by-name/ntlm-password-spray.md">NTLM Password Spray</a></li><li><a href="/analytics-alerts/alerts-by-name/okta-reported-threat-detected.md">Okta Reported Threat Detected</a></li><li><a href="/analytics-alerts/alerts-by-name/okta-account-reset-password-attempt.md">Okta account reset password attempt</a></li><li><a href="/analytics-alerts/alerts-by-name/okta-account-unlock.md">Okta account unlock</a></li><li><a href="/analytics-alerts/alerts-by-name/okta-device-assignment.md">Okta device assignment</a></li><li><a href="/analytics-alerts/alerts-by-name/possible-brute-force-attempt.md">Possible Brute-Force attempt</a></li><li><a href="/analytics-alerts/alerts-by-name/possible-tgt-reuse-from-different-hosts-pass-the-ticket.md">Possible TGT reuse from different hosts (pass the ticket)</a></li><li><a href="/analytics-alerts/alerts-by-name/possible-data-exfiltration-over-a-usb-storage-device.md">Possible data exfiltration over a USB storage device</a></li><li><a href="/analytics-alerts/alerts-by-name/possible-internal-data-exfiltration-over-a-usb-storage-device.md">Possible internal data exfiltration over a USB storage device</a></li><li><a href="/analytics-alerts/alerts-by-name/remote-account-enumeration.md">Remote account enumeration</a></li><li><a href="/analytics-alerts/alerts-by-name/ssh-authentication-brute-force-attempts.md">SSH authentication brute force attempts</a></li><li><a href="/analytics-alerts/alerts-by-name/sso-brute-force.md">SSO Brute Force</a></li><li><a href="/analytics-alerts/alerts-by-name/sso-password-spray.md">SSO Password Spray</a></li><li><a href="/analytics-alerts/alerts-by-name/sensitive-exchange-mail-sent-to-external-users.md">Sensitive Exchange mail sent to external users</a></li><li><a href="/analytics-alerts/alerts-by-name/short-lived-azure-ad-user-account.md">Short-lived Azure AD user account</a></li><li><a href="/analytics-alerts/alerts-by-name/storage-enumeration-activity.md">Storage enumeration activity</a></li><li><a href="/analytics-alerts/alerts-by-name/suspicious-dns-traffic.md">Suspicious DNS traffic</a></li><li><a href="/analytics-alerts/alerts-by-name/user-accessed-multiple-o365-aip-sensitive-files.md">User accessed multiple O365 AIP sensitive files</a></li><li><a href="/analytics-alerts/alerts-by-name/user-added-to-a-group-and-removed.md">User added to a group and removed</a></li><li><a href="/analytics-alerts/alerts-by-name/user-moved-exchange-sent-messages-to-deleted-items.md">User moved Exchange sent messages to deleted items</a></li><li><a href="/analytics-alerts/alerts-by-name/vpn-login-brute-force-attempt.md">VPN login Brute-Force attempt</a></li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
| Changed metadata of an Informational Analytics BIOC | <ul><li><a href="/analytics-alerts/alerts-by-name/unusual-db-process-spawning-a-shell.md">Unusual DB process spawning a shell</a></li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-analytics-content-releases/cortex-analytics-content-release-notes/2025-03-26.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
