Detectors
Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.
65 detectors match the current filters. tactic: TA0009 ✕
Download CSV6 tactics · 24 techniques · cell shade = number of matching detectors; click a cell to list them.
Initial Access
1 detector
Execution
1 detector
Defense Evasion
3 detectors
Credential Access
7 detectors
Collection
65 detectors
- Data Staged (16)
- Data from Cloud Storage (16)
- Archive Collected Data (9)
- Data from Information Repositories (9)
- Email Collection (9)
- Automated Collection (6)
- Automated Exfiltration (6)
- Exfiltration Over Physical Medium (4)
- Unsecured Credentials (3)
- Data from Local System (2)
- Input Capture (2)
- Modify Cloud Compute Infrastructure (2)
- OS Credential Dumping (2)
- Screen Capture (2)
- Transfer Data to Cloud Account (2)
- Audio Capture (1)
- Clipboard Data (1)
- Command and Scripting Interpreter (1)
- Credentials from Password Stores (1)
- Data from Network Shared Drive (1)
- Exfiltration Over Alternative Protocol (1)
- Exfiltration Over Web Service (1)
- Indicator Removal (1)
- Valid Accounts (1)
Exfiltration
14 detectors