Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
4,311 detections
Filters
Last updated
All Time
Detection languages
2,035
733
398
299
243
Contributors
1,048
740
503
372
239
Categories
20,456
11,839
5,876
5,155
4,865
4,311
Platforms
2,572
793
615
382
319
Products / Services
767
740
659
513
348
MITRE Techniques
2,350
917
848
814
635
CVEs
9
6
6
6
5
IDS Classtypes
81
66
44
14
14
IDS Protocols
136
79
11
7
4
KQL Query from file: Entra User Account Compromised by C2
KQL Query from file: Attacker in the Middle Precision Detection
KQL Query from file: DefenderXDR LDAP Enumeration Detection
KQL Query from file: Detect Privilege Admin under AiTM attack
KQL Query from file: Threat Intelligence Data from Sentinel UEBA
KQL Query from file: Hunting Malicious Copilot Agent
KQL Query from file: Detecting FIDO2 Passkey Abuse
KQL Query
KQL Query
KQL Query from file: Exploring M365 Accounts Investigation
KQL Query
KQL Query from file: Global Admin Entra Cookie with Chrome ZeroDay
KQL Query from file: BadSuccessor Detection
KQL Query from file: Hunting malicious oauth grant by phished user
KQL Query from file: Hunting Rockstar 2FA
KQL Query from file: Monitor Azure API Secrets Extraction
KQL Query
KQL Query from file: MailItemsAccessed Defense
KQL Query from file: Detecting GOLDEN SAML Attack
KQL Query from file: Entra Passkey Addition Threat Detection
KQL Query from file: Detecting High Risk Passkey Users
Page 174 of 206