Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,089 detections
Filters
Last updated
All Time
Detection languages
620
191
113
86
47
Contributors
302
211
112
88
54
Categories
482
416
353
192
164
Platforms
727
348
216
136
57
Products / Services
518
292
198
124
88
MITRE Techniques
18,116
15,638
12,585
8,395
6,225
1,089
CVEs
5
5
5
5
4
IDS Classtypes
3
2
1
1
IDS Protocols
3
KQL Query from file: Azure Cloud Security Monitoring
KQL Query from file: Monitor Privilege User SSPR
KQL Query
KQL Query from file: Nation State Actors via Microsoft Graph
KQL Query
KQL Query
KQL Query from file: Global Admin Entra Cookie with Chrome ZeroDay
KQL Query from file: Azure CLI Spray - ASN 53667
KQL Query from file: Azure Cloud Security Monitoring
KQL Query from file: CloudApp Privilege OAuth Grant
KQL Query
KQL Query from file: Entra Admin Roles Query
KQL Query
KQL Query
KQL Query
KQL Query
KQL Query from file: Tracking The Most Dangerous Entra Admin Role
KQL Query from file: Identity Blast Radius 2
KQL Query from file: CVE-2024-7971 Patch Prioritization
KQL Query from file: Detecting Nation State Actors @ Near Realtime
KQL Query from file: Detecting Copilot Studio Bot Creation
Page 45 of 52