Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,632 detections
Filters
Last updated
All Time
Detection languages
1,056
161
128
83
72
Contributors
427
386
258
93
93
Categories
923
331
312
289
237
Platforms
768
404
356
303
295
Products / Services
820
308
216
159
157
MITRE Techniques
18,123
15,639
12,581
8,394
6,215
1,632
CVEs
3
2
1
1
1
IDS Classtypes
108
26
18
5
3
IDS Protocols
100
33
20
3
This query visualises emails with Phish detections (High confidence) summarizing the data by Delivery Location.
KQL Query
This query visualises total emails with Phish detections over time summarizing the data daily by Delivery Location.
KQL Query from file: Detecting External Microsoft Teams Spray
KQL Query
KQL Query
KQL Query from file: The Hunt for QR Phisher
KQL Query from file: Critical Identities OAuth Grant
KQL Query
KQL Query from file: The Hunt for Blob Phishing Mail Domain
KQL Query from file: Hunting malicious oauth grant by phished user
KQL Query
KQL Query from file: Threat hunting voice phishing for Teams
KQL Query from file: CloudApp Privilege OAuth Grant
KQL Query from file: MDO - Enhancing Email Security with NRD Filtering
KQL Query from file: M365 Copilot Gone Rouge
KQL Query from file: Sneaky 2FA MDO Detection
KQL Query from file: Detecting TeamsPhisher attack with Azure Sentinel
KQL Query from file: Detecting Mamba 2FA phishing-as-a-service
KQL Query from file: OAuth app using the OD file picker permission
KQL Query
Page 71 of 78