Detectors
Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.
123 detectors match the current filters.
Download CSV12 tactics · 42 techniques · cell shade = number of matching detectors; click a cell to list them.
Initial Access
13 detectors
Execution
16 detectors
Persistence
23 detectors
Privilege Escalation
24 detectors
Defense Evasion
22 detectors
- Impair Defenses (11)
- Modify Cloud Compute Infrastructure (5)
- Transfer Data to Cloud Account (2)
- Unused/Unsupported Cloud Regions (2)
- Valid Accounts (2)
- Abuse Elevation Control Mechanism (1)
- Cloud Infrastructure Discovery (1)
- Cloud Service Discovery (1)
- Data from Cloud Storage (1)
- Domain or Tenant Policy Modification (1)
- File and Directory Permissions Modification (1)
- Masquerading (1)
- Trusted Relationship (1)
Credential Access
11 detectors
Discovery
9 detectors
Lateral Movement
2 detectors
Collection
8 detectors
Command and Control
1 detector
Exfiltration
11 detectors