Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
2,832 detections
Filters
Last updated
All Time
Detection languages
1,375
495
363
281
175
Contributors
848
453
393
252
188
Categories
20,443
11,831
5,875
5,151
4,864
2,832
Platforms
1,449
916
693
670
264
Products / Services
994
701
613
469
216
MITRE Techniques
1,240
912
484
482
388
CVEs
6
5
2
1
1
IDS Classtypes
15
10
6
5
3
IDS Protocols
39
KQL Query from file: AWS NoSuchBucket Check
KQL Query from file: CloudApp Privilege OAuth Grant
KQL Query from file: CloudApp Suspicious Copilot Agent Detection
KQL Query
KQL Query from file: Entra Admin Roles Query
KQL Query
KQL Query from file: Azure cloud account takeover
KQL Query
KQL Query from file: OAuth app using the OD file picker permission
KQL Query
KQL Query from file: Multi-Cloud DefenderXDR KQL Threat Detection
KQL Query from file: Azure AI Security Finding Report
KQL Query from file: Sentinel All-In-One UPN ThreatHunt
KQL Query
KQL Query from file: Detecting EXO MS Graph Enumeration Attacks
KQL Query from file: Technique profile eDiscovery misuse detection
KQL Query from file: ATP Detection for Critical Identities
KQL Query from file: KQL to check Azure API spray attacks
KQL Query
KQL Query from file: Check for Azure Outdated Security Protocols
KQL Query from file: Detecting Teams Red Team Tool ConvoC2
Page 113 of 135