Analytics Alerts
Browse the Cortex analytics alert reference.
72 alerts match the current filters. tactic: TA0011 ✕
Show list7 tactics · 21 techniques · cell shade = number of matching alerts; click a cell to list them.
Initial Access
7 alerts
Execution
1 alert
Persistence
1 alert
Defense Evasion
6 alerts
Lateral Movement
2 alerts
Command and Control
72 alerts
- Application Layer Protocol (36)
- Proxy (11)
- Web Service (7)
- Non-Standard Port (6)
- Remote Access Tools (5)
- Valid Accounts (5)
- Exfiltration Over Web Service (4)
- Non-Application Layer Protocol (4)
- Protocol Tunneling (4)
- System Binary Proxy Execution (4)
- Ingress Tool Transfer (3)
- Dynamic Resolution (2)
- Exfiltration Over Alternative Protocol (2)
- Phishing (2)
- Remote Services (2)
- Trusted Relationship (2)
- Command and Scripting Interpreter (1)
- Exfiltration Over C2 Channel (1)
- Impair Defenses (1)
- Masquerading (1)
- Software Extensions (1)