Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
5,151 detections
Filters
Last updated
All Time
Detection languages
2,297
1,070
640
289
288
Contributors
918
814
769
696
224
Categories
20,443
11,831
5,875
5,151
4,864
Platforms
2,854
2,017
813
521
213
Products / Services
1,334
1,144
831
576
366
MITRE Techniques
1,820
1,307
787
746
577
CVEs
9
7
7
6
6
IDS Classtypes
538
151
101
57
48
IDS Protocols
375
373
132
64
42
KQL Query from file: Fortigate Belsen Leak KQL Check
KQL Query from file: Detecting Palo Alto Firewall Exploits
KQL Query
KQL Query from file: Exploring M365 Accounts Investigation
KQL Query
KQL Query from file: MDE: Detecting Quick Assist Usage
KQL Query from file: Detecting Commvault Exploitation in Azure
KQL Query from file: Detecting GOLDEN SAML Attack
KQL Query from file: External Attack Surface Monitoring KQL
KQL Query from file: DefenderXDR Advanced Hunting All-In-One IP Search
KQL Query from file: Advanced Vishing KQL Detection
KQL Query from file: Sneaky 2FA MDO Detection
KQL Query from file: Detecting TeamsPhisher attack with Azure Sentinel
KQL Query from file: Detecting Mamba 2FA phishing-as-a-service
KQL Query
KQL Query
KQL Query
KQL Query from file: Multi-Cloud DefenderXDR KQL Threat Detection
KQL Query
KQL Query
KQL Query
Page 218 of 246