Detectors
Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.
36 detectors match the current filters. tactic: TA0011 ✕
Download CSV5 tactics · 18 techniques · cell shade = number of matching detectors; click a cell to list them.
Initial Access
3 detectors
Persistence
1 detector
Defense Evasion
2 detectors
Command and Control
36 detectors
- Application Layer Protocol (20)
- Web Service (5)
- Non-Standard Port (4)
- Proxy (3)
- Exfiltration Over Web Service (2)
- Non-Application Layer Protocol (2)
- Phishing (2)
- Protocol Tunneling (2)
- Remote Access Tools (2)
- Trusted Relationship (2)
- Data Encoding (1)
- Exfiltration Over Alternative Protocol (1)
- Exfiltration Over C2 Channel (1)
- Ingress Tool Transfer (1)
- Masquerading (1)
- Software Extensions (1)
- System Binary Proxy Execution (1)
- Valid Accounts (1)