Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
5 detections
Filters
Last updated
All Time
Detection languages
4
1
Contributors
2
2
1
Categories
2
2
1
1
1
Platforms
3
2
1
Products / Services
3
1
1
1
1
MITRE Techniques
18,116
15,638
12,585
8,395
6,225
Malvertising loader delivering CastleStealer via malicious Google Ads
KQL Query
KQL Query from file: Threat Intelligence Data from Sentinel UEBA2
This query visualises total emails with Malware detections over time summarizing the data daily by Delivery Location.
ZLoader was delivered in a campaign in late summer 2021. This campaign was tweeted by @MsftSecIntel on twitter.

