Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
782 detections
Filters
Last updated
All Time
Detection languages
431
116
112
63
22
Contributors
176
85
81
80
70
Categories
20,443
11,831
5,875
5,151
4,864
782
Platforms
340
223
141
138
71
Products / Services
319
167
85
57
50
MITRE Techniques
413
348
255
231
200
CVEs
5
5
3
2
2
IDS Classtypes
7
2
1
1
1
IDS Protocols
8
2
1
1
KQL Query
KQL Query from file: NEW Real-time Anomalous Token Detection
KQL Query from file: Attacker in the Middle Precision Detection
KQL Query from file: Nation State Actors via Microsoft Graph
KQL Query
KQL Query
KQL Query
KQL Query from file: Conditional Access Report
KQL Query from file: Azure CLI Spray - ASN 53667
KQL Query from file: Hunting fasthttp Bruteforce Campaign
KQL Query from file: Detecting High Risk Passkey Users
KQL Query from file: User Sign-in Activity
KQL Query
KQL Query from file: New Threat Actor Group Signature
KQL Query
KQL Query from file: Threat Hunting Nation State Actors
KQL Query from file: ATP Detection for Critical Identities
KQL Query from file: KQL to check Azure API spray attacks
KQL Query from file: DISCOVERY: Obsolete device connecting to Entra
KQL Query from file: Threat Intelligence Data from Sentinel UEBA2
KQL Query
Page 28 of 38