Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

4,536 detections

KQL Query from file: Chrome extension stealth persistence detection
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
4057
KQL Query from file: CVE-2025-32705 Out-of-bounds Read Detection
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
8053
KQL Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
4052
KQL Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
4052
KQL Query from file: KQLWiz PDF NTLM Leak Detector
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
2051
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 12052025
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
4051
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 10032025
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
3051
KQL Query from file: Hunting chrome extension with hidden tracking
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
5050
KQL Query from file: psexecsvc.py detection
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
8249
KQL Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
4049
KQL Query from file: APT Stealth Falcon - CVE-2025-33053 Detection
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
5246
KQL Query from file: Golden Chickens TerraStealerV2 Malware Detection
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
4045
KQL Query from file: Cookie-Bite Detection
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
3045
KQL Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
6042
KQL Query from file: CVE-2025-21298 Zero-Click RCE
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
4042
KQL Query from file: BlueAlpha GammaDrop Detection
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
2041
KQL Query from file: Hunting NonEuclid RAT
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
2039
KQL Query from file: Hunting Malicious Chrome Extension
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
3039
KQL Query from file: CVE-2025-24054 NTLM Exploit in the Wild Detection
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
4039
KQL Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
3038
KQL Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
3037
Page 202 of 216