Detectors
Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.
56 detectors match the current filters.
Download CSV11 tactics · 39 techniques · cell shade = number of matching detectors; click a cell to list them.
Reconnaissance
2 detectors
Initial Access
3 detectors
Execution
8 detectors
Persistence
17 detectors
- Boot or Logon Autostart Execution (4)
- Create or Modify System Process (3)
- Scheduled Task/Job (3)
- Server Software Component (3)
- Event Triggered Execution (2)
- External Remote Services (2)
- System Services (2)
- Boot or Logon Initialization Scripts (1)
- Masquerading (1)
- Pre-OS Boot (1)
- Remote Services (1)
- User Execution (1)
Privilege Escalation
8 detectors
Defense Evasion
10 detectors
Credential Access
12 detectors
Discovery
3 detectors
Lateral Movement
6 detectors
Collection
5 detectors
Command and Control
3 detectors