Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,598 detections
Filters
Last updated
All Time
Detection languages
1,151
134
65
63
53
Contributors
368
274
239
197
70
Categories
983
375
271
227
140
Platforms
871
506
164
160
149
Products / Services
949
298
133
113
108
MITRE Techniques
18,116
15,638
12,587
8,397
6,227
1,598
CVEs
2
1
1
1
1
IDS Classtypes
18
5
4
1
1
IDS Protocols
15
8
4
3
This query visualises emails with Spam detections (High confidence) summarizing the data by Delivery Location.
KQL Query from file: Social Engineering Attack Detection
KQL Query from file: Hunting Rockstar 2FA
KQL Query from file: Threat hunting voice phishing for Teams
This query visualises total emails with Spam detections over time summarizing the data daily
KQL Query from file: MDO - Enhancing Email Security with NRD Filtering
KQL Query from file: Advanced Vishing KQL Detection
KQL Query from file: M365 Copilot Gone Rouge
KQL Query from file: Sneaky 2FA MDO Detection
KQL Query from file: Detecting TeamsPhisher attack with Azure Sentinel
KQL Query from file: Detecting Mamba 2FA phishing-as-a-service
KQL Query
This query visualises top 10 users targeted with Spam.
KQL Query from file: Hunting New Variant of Snake Keylogger
KQL Query from file: Detect Power Pwn (aka LOLCopilot) Red Team Tool
KQL Query
KQL Query from file: Critical Monitor for Critical Assets
KQL Query from file: Exposure Management + Defender for Office 365
KQL Query from file: Detecting Phishing Emails with Cloudflare R2 URLs
KQL Query from file: LockBit Black Ransomware
KQL Query
Page 61 of 77