Detectors
Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.
66 detectors match the current filters. tactic: TA0010 ✕
Download CSV7 tactics · 20 techniques · cell shade = number of matching detectors; click a cell to list them.
Initial Access
4 detectors
Execution
1 detector
Persistence
2 detectors
Defense Evasion
3 detectors
Collection
14 detectors
Command and Control
4 detectors
Exfiltration
66 detectors
- Transfer Data to Cloud Account (26)
- Exfiltration Over Alternative Protocol (20)
- Automated Exfiltration (8)
- Data from Cloud Storage (7)
- Data Staged (5)
- Exfiltration Over Physical Medium (5)
- Exfiltration Over Web Service (5)
- Application Layer Protocol (3)
- Phishing (3)
- Email Collection (2)
- Modify Cloud Compute Infrastructure (2)
- Command and Scripting Interpreter (1)
- Data Transfer Size Limits (1)
- Event Triggered Execution (1)
- Exfiltration Over C2 Channel (1)
- External Remote Services (1)
- Impair Defenses (1)
- Remote Access Tools (1)
- Valid Accounts (1)
- Web Service (1)