Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
4 detections
Filters
Last updated
All Time
Detection languages
4
Contributors
3
1
Categories
2
1
1
1
1
Platforms
3
1
Products / Services
3
1
1
1
MITRE Techniques
18,127
15,648
12,596
8,407
6,231
KQL Query from file: Fortigate Belsen Leak KQL Check
KQL Query from file: defendnot detection
KQL Query from file: MDE KQL to detect UAC bypass of Fickle Stealer
Original Sigma Rule: https://github.com/Neo23x0/sigma/blob/master/rules/apt/apt_apt29_thinktanks.yml.
Questions via Twitter: @janvonkirchheim.
Questions via Twitter: @janvonkirchheim.
