Detectors
Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.
44 detectors match the current filters.
Download CSV10 tactics · 20 techniques · cell shade = number of matching detectors; click a cell to list them.
Reconnaissance
1 detector
Resource Development
3 detectors
Initial Access
12 detectors
Execution
1 detector
Persistence
8 detectors
Privilege Escalation
5 detectors
Defense Evasion
5 detectors
Credential Access
19 detectors
- Brute Force (11)
- Account Discovery (3)
- Compromise Accounts (3)
- Steal or Forge Authentication Certificates (3)
- Forced Authentication (2)
- Steal or Forge Kerberos Tickets (2)
- Adversary-in-the-Middle (1)
- Credentials from Password Stores (1)
- Deobfuscate/Decode Files or Information (1)
- Unsecured Credentials (1)
- Valid Accounts (1)
Discovery
3 detectors
Lateral Movement
1 detector