Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
2,832 detections
Filters
Last updated
All Time
Detection languages
1,375
495
363
281
175
Contributors
848
453
393
252
188
Categories
20,443
11,831
5,875
5,151
4,864
2,832
Platforms
1,449
916
693
670
264
Products / Services
994
701
613
469
216
MITRE Techniques
1,240
912
484
482
388
CVEs
6
5
2
1
1
IDS Classtypes
15
10
6
5
3
IDS Protocols
39
KQL Query from file: Sentinel All-In-One IP ThreatHunt
KQL Query
KQL Query
KQL Query from file: Sentinel UEBA Privilege Escalation Detection
KQL Query
KQL Query from file: Entra Cross-Tenant Activity Monitoring
KQL Query
KQL Query from file: Detecting M365 Copilot Shared Agent
KQL Query from file: Nation State Actors via Microsoft Graph
KQL Query
KQL Query from file: Detecting FIDO2 Passkey Abuse
KQL Query
KQL Query
KQL Query from file: Critical Identities OAuth Grant
KQL Query
KQL Query from file: Hunting malicious oauth grant by phished user
KQL Query from file: EntraFalcon Detection
KQL Query
KQL Query from file: Monitor Azure API Secrets Extraction
KQL Query
KQL Query from file: MailItemsAccessed Defense
Page 112 of 135