BIOCs
Browse the Cortex behavioral indicator of compromise (BIOC) detection rules.
49 BIOCs match the current filters. tactic: TA0006 ✕
Download CSV Show list5 tactics · 13 techniques · cell shade = number of matching BIOCs; click a cell to list them.
Credential Access
49 BIOCs
- OS Credential Dumping (22)
- Credentials from Password Stores (9)
- Unsecured Credentials (8)
- Input Capture (4)
- Automated Collection (2)
- Brute Force (2)
- Modify Authentication Process (2)
- Defacement (1)
- Inhibit System Recovery (1)
- Network Service Discovery (1)
- Network Sniffing (1)
- Steal or Forge Kerberos Tickets (1)
- Use Alternate Authentication Material (1)
Discovery
2 BIOCs
Lateral Movement
1 BIOC
Collection
4 BIOCs