Detectors
Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.
62 detectors match the current filters. tactic: TA0010 ✕
Download CSV7 tactics · 20 techniques · cell shade = number of matching detectors; click a cell to list them.
Initial Access
5 detectors
Execution
3 detectors
Persistence
2 detectors
Defense Evasion
3 detectors
Collection
11 detectors
Command and Control
5 detectors
Exfiltration
62 detectors
- Transfer Data to Cloud Account (30)
- Automated Exfiltration (11)
- Exfiltration Over Alternative Protocol (11)
- Data from Cloud Storage (5)
- Email Collection (4)
- Exfiltration Over Web Service (4)
- Phishing (4)
- Application Layer Protocol (3)
- Command and Scripting Interpreter (3)
- Exfiltration Over C2 Channel (3)
- Data Staged (2)
- Exfiltration Over Physical Medium (2)
- Modify Cloud Compute Infrastructure (2)
- Web Service (2)
- Data Transfer Size Limits (1)
- Event Triggered Execution (1)
- External Remote Services (1)
- Impair Defenses (1)
- Remote Access Tools (1)
- Valid Accounts (1)