Detectors
Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.
64 detectors match the current filters. technique: T1204 ✕
Download CSV8 tactics · 13 techniques · cell shade = number of matching detectors; click a cell to list them.
Resource Development
3 detectors
Initial Access
10 detectors
Execution
64 detectors
- User Execution (64)
- Brute Force (11)
- Phishing (10)
- Masquerading (6)
- Native API (3)
- Obtain Capabilities (3)
- Boot or Logon Autostart Execution (1)
- Hide Artifacts (1)
- Hijack Execution Flow (1)
- Impersonation (1)
- Steal Application Access Token (1)
- System Binary Proxy Execution (1)
- Taint Shared Content (1)
Persistence
1 detector
Privilege Escalation
1 detector
Defense Evasion
10 detectors
Credential Access
12 detectors
Lateral Movement
1 detector