Detectors
Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.
153 detectors match the current filters.
Download CSV12 tactics · 44 techniques · cell shade = number of matching detectors; click a cell to list them.
Initial Access
20 detectors
Execution
22 detectors
Persistence
25 detectors
Privilege Escalation
25 detectors
Defense Evasion
24 detectors
- Impair Defenses (13)
- Modify Cloud Compute Infrastructure (5)
- Transfer Data to Cloud Account (2)
- Unused/Unsupported Cloud Regions (2)
- Valid Accounts (2)
- Abuse Elevation Control Mechanism (1)
- Cloud Infrastructure Discovery (1)
- Cloud Service Discovery (1)
- Data Manipulation (1)
- Data from Cloud Storage (1)
- Domain or Tenant Policy Modification (1)
- File and Directory Permissions Modification (1)
- Masquerading (1)
- Trusted Relationship (1)
Credential Access
12 detectors
Discovery
11 detectors
Lateral Movement
2 detectors
Collection
10 detectors
Command and Control
3 detectors
Exfiltration
13 detectors