Detectors
Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.
34 detectors match the current filters. tactic: TA0011 ✕ technique: T1071 ✕
Download CSV6 tactics · 11 techniques · cell shade = number of matching detectors; click a cell to list them.
Initial Access
2 detectors
Execution
1 detector
Persistence
1 detector
Defense Evasion
3 detectors
Command and Control
34 detectors
- Application Layer Protocol (34)
- Non-Standard Port (5)
- System Binary Proxy Execution (3)
- Exfiltration Over Alternative Protocol (2)
- Exfiltration Over C2 Channel (2)
- Phishing (2)
- Trusted Relationship (2)
- Command and Scripting Interpreter (1)
- Exfiltration Over Web Service (1)
- Remote Access Tools (1)
- Software Extensions (1)