Detectors

Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.

1 detector match the current filters. tactic: TA0005 ✕ technique: T1059 ✕

Download CSV
Type Name Severity Module Data source / event ATT&CK
BIOC Encoded VBScript executed Attackers tend to hide their malicious behavior in many ways, one of which is obfuscating their code via encoding. High Platform Analytics Process execution Execution, Defense Evasion