Detectors
Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.
25 detectors match the current filters. tactic: TA0003 ✕
Download CSV6 tactics · 16 techniques · cell shade = number of matching detectors; click a cell to list them.
Initial Access
2 detectors
Execution
3 detectors
Persistence
25 detectors
- Account Manipulation (6)
- Valid Accounts (6)
- Boot or Logon Autostart Execution (4)
- Create or Modify System Process (3)
- Scheduled Task/Job (3)
- Server Software Component (3)
- Event Triggered Execution (2)
- External Remote Services (2)
- Masquerading (2)
- System Services (2)
- Boot or Logon Initialization Scripts (1)
- Create Account (1)
- Hide Artifacts (1)
- Pre-OS Boot (1)
- Remote Services (1)
- User Execution (1)
Privilege Escalation
9 detectors
Defense Evasion
2 detectors
Lateral Movement
1 detector