Detectors
Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.
94 detectors match the current filters. tactic: TA0010 ✕
Download CSV7 tactics · 21 techniques · cell shade = number of matching detectors; click a cell to list them.
Initial Access
5 detectors
Execution
3 detectors
Persistence
2 detectors
Defense Evasion
4 detectors
Collection
21 detectors
Command and Control
8 detectors
Exfiltration
94 detectors
- Transfer Data to Cloud Account (32)
- Exfiltration Over Alternative Protocol (28)
- Automated Exfiltration (16)
- Data from Cloud Storage (10)
- Exfiltration Over Web Service (8)
- Data Staged (6)
- Exfiltration Over Physical Medium (6)
- Application Layer Protocol (5)
- Email Collection (5)
- Phishing (4)
- Command and Scripting Interpreter (3)
- Exfiltration Over C2 Channel (3)
- Web Service (3)
- Modify Cloud Compute Infrastructure (2)
- BITS Jobs (1)
- Data Transfer Size Limits (1)
- Event Triggered Execution (1)
- External Remote Services (1)
- Impair Defenses (1)
- Remote Access Tools (1)
- Valid Accounts (1)