Detectors
Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.
56 detectors match the current filters.
Download CSV9 tactics · 35 techniques · cell shade = number of matching detectors; click a cell to list them.
Execution
5 detectors
Persistence
11 detectors
Privilege Escalation
3 detectors
Defense Evasion
7 detectors
Credential Access
17 detectors
Discovery
16 detectors
- Account Discovery (8)
- System Information Discovery (3)
- System Owner/User Discovery (3)
- File and Directory Discovery (2)
- OS Credential Dumping (2)
- Permission Groups Discovery (2)
- System Service Discovery (2)
- Virtualization/Sandbox Evasion (2)
- Windows Management Instrumentation (2)
- Browser Information Discovery (1)
- Credentials from Password Stores (1)
- Network Sniffing (1)
- Process Discovery (1)
- Remote System Discovery (1)
- System Network Configuration Discovery (1)
- System Network Connections Discovery (1)
- Unsecured Credentials (1)
Lateral Movement
4 detectors
Collection
2 detectors
Command and Control
1 detector