Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
5,151 detections
Filters
Last updated
All Time
Detection languages
2,297
1,070
640
289
288
Contributors
918
814
769
696
224
Categories
20,443
11,831
5,875
5,151
4,864
Platforms
2,854
2,017
813
521
213
Products / Services
1,334
1,144
831
576
366
MITRE Techniques
1,820
1,307
787
746
577
CVEs
9
7
7
6
6
IDS Classtypes
538
151
101
57
48
IDS Protocols
375
373
132
64
42
KQL Query from file: M365 Copilot Extensions Threat Monitoring
KQL Query from file: Sentinel Timeroasting KQL detection
KQL Query from file: Honeypot Threat Intelligence (TI) Data
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan
KQL Query
KQL Query
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 12052025
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 10032025
KQL Query
KQL Query
KQL Query from file: Defending against dot zip domain phishing attack
KQL Query
KQL Query from file: Threat Hunting Mshta with Sentinel TI
KQL Query from file: CVE-2024-38063 CVSS 9.8 Prioritization
KQL Query from file: BlueAlpha GammaDrop Detection
KQL Query from file: CVE-2025-24054 NTLM Exploit in the Wild Detection
KQL Query from file: Tracking Proton66 Activity with KQL
KQL Query
KQL Query
KQL Query from file: CVE-2024-10443 Hunting: RISK:STATION
Page 220 of 246