Detectors
Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.
31 detectors match the current filters. tactic: TA0003 ✕
Download CSV7 tactics · 14 techniques · cell shade = number of matching detectors; click a cell to list them.
Initial Access
4 detectors
Execution
2 detectors
Persistence
31 detectors
- Account Manipulation (15)
- Valid Accounts (10)
- Cloud Application Integration (4)
- Modify Authentication Process (3)
- Command and Scripting Interpreter (2)
- Domain or Tenant Policy Modification (2)
- Impair Defenses (2)
- Use Alternate Authentication Material (2)
- Access Token Manipulation (1)
- Automated Exfiltration (1)
- Create Account (1)
- Event Triggered Execution (1)
- Software Extensions (1)
- Supply Chain Compromise (1)
Privilege Escalation
2 detectors
Defense Evasion
4 detectors
Credential Access
2 detectors
Exfiltration
1 detector