Detectors
Every Cortex detection rule the toolbox knows about — analytics alerts, BIOCs and correlation rules — in one filterable set.
2 detectors match the current filters. technique: T1176 ✕
Download CSV| Type | Name | Severity | Module | Data source / event | ATT&CK |
|---|---|---|---|---|---|
| BIOC | Chrome runs with key security features disabled This chrome process ran with command line arguments that disabled key security features disabled. It can have legitimate uses, but this technique is often used by malware to load malicious or untrusted browser extensions. | Low | Platform Analytics | Process execution | Persistence |
| BIOC | Manipulation of Firefox plugins and extensions via the Registry Plugins and extensions are loaded from all of these Registry keys. | Medium | Platform Analytics | Registry | Persistence |