Detectors
Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.
25 detectors match the current filters. tactic: TA0008 ✕
Download CSV6 tactics · 11 techniques · cell shade = number of matching detectors; click a cell to list them.
Initial Access
1 detector
Execution
6 detectors
Persistence
1 detector
Credential Access
1 detector
Discovery
1 detector
Lateral Movement
25 detectors
- Remote Services (21)
- System Services (4)
- Exploitation of Remote Services (2)
- Lateral Tool Transfer (2)
- Adversary-in-the-Middle (1)
- Command and Scripting Interpreter (1)
- Exploit Public-Facing Application (1)
- Network Service Discovery (1)
- Scheduled Task/Job (1)
- Use Alternate Authentication Material (1)
- Windows Management Instrumentation (1)