Detectors
Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.
62 detectors match the current filters. tactic: TA0011 ✕
Download CSV6 tactics · 16 techniques · cell shade = number of matching detectors; click a cell to list them.
Initial Access
5 detectors
Execution
1 detector
Defense Evasion
6 detectors
Lateral Movement
2 detectors
Command and Control
62 detectors
- Application Layer Protocol (30)
- Proxy (11)
- Web Service (6)
- Remote Access Tools (5)
- Valid Accounts (5)
- Non-Application Layer Protocol (4)
- Non-Standard Port (4)
- System Binary Proxy Execution (4)
- Exfiltration Over Web Service (3)
- Ingress Tool Transfer (3)
- Protocol Tunneling (3)
- Exfiltration Over C2 Channel (2)
- Remote Services (2)
- Command and Scripting Interpreter (1)
- Impair Defenses (1)
- Masquerading (1)