Detectors
Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.
49 detectors match the current filters. tactic: TA0009 ✕
Download CSV8 tactics · 21 techniques · cell shade = number of matching detectors; click a cell to list them.
Reconnaissance
1 detector
Initial Access
3 detectors
Execution
3 detectors
Defense Evasion
3 detectors
Credential Access
2 detectors
Discovery
1 detector
Collection
49 detectors
- Email Collection (10)
- Data from Cloud Storage (9)
- Automated Exfiltration (8)
- Data Staged (8)
- Data from Information Repositories (8)
- Data from Local System (6)
- Archive Collected Data (4)
- Automated Collection (3)
- Command and Scripting Interpreter (3)
- Valid Accounts (3)
- Clipboard Data (2)
- Exfiltration Over Physical Medium (2)
- Input Capture (2)
- Modify Cloud Compute Infrastructure (2)
- Screen Capture (2)
- Audio Capture (1)
- Browser Information Discovery (1)
- Gather Victim Host Information (1)
- Indicator Removal (1)
- Transfer Data to Cloud Account (1)
- Video Capture (1)