Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
5,151 detections
Filters
Last updated
All Time
Detection languages
2,297
1,070
640
289
288
Contributors
918
814
769
696
224
Categories
20,443
11,831
5,875
5,151
4,864
Platforms
2,854
2,017
813
521
213
Products / Services
1,334
1,144
831
576
366
MITRE Techniques
1,820
1,307
787
746
577
CVEs
9
7
7
6
6
IDS Classtypes
538
151
101
57
48
IDS Protocols
375
373
132
64
42
KQL Query from file: Mitigating security risks in MCP implementations
KQL Query from file: Email Campaign - Exploiting SVG Files and trycloudflare.com to Spread Malware
KQL Query from file: Hunting New Variant of Snake Keylogger
KQL Query from file: Detect Power Pwn (aka LOLCopilot) Red Team Tool
KQL Query from file: Ottercookie Detection
KQL Query from file: One-Click ANY RUN Storm-1747 KQL Scan
KQL Query
KQL Query from file: Exposure Management + Defender for Office 365
KQL Query from file: Malware C2 Comms over Azure Blob Metadata
KQL Query
KQL Query from file: KQL to check Azure API spray attacks
KQL Query
KQL Query from file: Check for Azure Outdated Security Protocols
KQL Query from file: NTLMv2 Hash Leak via COM Detection
KQL Query
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 05052025
KQL Query
KQL Query
KQL Query from file: DefenderXDR Exposure Management for CVE-2024-3094
KQL Query from file: Hunting Zloader DNS Tunneling
KQL Query from file: CVE-2025-22224 (CVSS 9.3 CRITICAL) Internet facing VMware server discovery
Page 219 of 246