Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,598 detections
Filters
Last updated
All Time
Detection languages
1,151
134
65
63
53
Contributors
368
274
239
197
70
Categories
983
375
271
227
140
Platforms
871
506
164
160
149
Products / Services
949
298
133
113
108
MITRE Techniques
18,116
15,638
12,586
8,396
6,226
1,598
CVEs
2
1
1
1
1
IDS Classtypes
18
5
4
1
1
IDS Protocols
15
8
4
3
This query visualises total emails with Spam detections summarizing the data by various Spam detection technologies/controls.
This query visualises total inbound emails which has any Bulk complaint level.
KQL Query
KQL Query from file: DocuShield - NRT Anti-Impersonation Email Purge
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 05052025
KQL Query from file: Phishing campaigns leveraging Microsoft Forms
KQL Query from file: Brands Impersonation Phishing Trend
KQL Query from file: Perimeter Defense - Attack Surface Reduction
KQL Query from file: OAuth App for BEC & Phishing Detection
This query visualises total inbound emails which has any Bulk complaint level.
KQL Query from file: KQL URL Protection Report
KQL Query from file: Discord Invite Hijacking Detection
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan
KQL Query from file: AppSheet.com abused to send Phish
KQL Query from file: MDO Email Threat Classification By ISP
KQL Query
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 12052025
KQL Query
KQL Query from file: MDO Email Threat Classification By Country
This query visualises total emails with Spam detections over time summarizing the data daily by Delivery Location.
KQL Query from file: Threat Hunting Microsoft Sway Quishing
Page 62 of 77