Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

2 detections

Detects files dropped into the %ProgramData%\USOShared\Logs\User path, a location used by PRISMEX to hide its proxy DLL.
avatar
Ibrahim Saud@tektrix
avatar
Detections.ai Community
4 months ago
209
KQL Query from file: Entra QR Code Sign-In KQL Detection
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
7081