Detectors
Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.
129 detectors match the current filters.
Download CSV12 tactics · 41 techniques · cell shade = number of matching detectors; click a cell to list them.
Initial Access
15 detectors
Execution
20 detectors
Persistence
24 detectors
Privilege Escalation
25 detectors
Defense Evasion
23 detectors
- Impair Defenses (13)
- Modify Cloud Compute Infrastructure (5)
- Transfer Data to Cloud Account (2)
- Valid Accounts (2)
- Abuse Elevation Control Mechanism (1)
- Data Manipulation (1)
- Data from Cloud Storage (1)
- Domain or Tenant Policy Modification (1)
- File and Directory Permissions Modification (1)
- Masquerading (1)
- Trusted Relationship (1)
- Unused/Unsupported Cloud Regions (1)
Credential Access
11 detectors
Discovery
4 detectors
Lateral Movement
2 detectors
Collection
5 detectors
Command and Control
3 detectors
Exfiltration
8 detectors