Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
12,585 detections
Filters
Last updated
All Time
Detection languages
5,139
3,901
1,034
828
478
Contributors
2,488
1,655
1,442
1,408
970
Categories
3,446
1,826
1,661
1,578
1,417
Platforms
8,041
1,889
1,335
1,053
778
Products / Services
1,979
1,796
1,633
1,096
1,041
MITRE Techniques
18,116
15,638
12,585
8,395
6,225
CVEs
21
21
21
19
14
IDS Classtypes
136
73
43
15
14
IDS Protocols
150
123
15
12
6
KQL Query from file: Monitor Azure API Secrets Extraction
KQL Query from file: Azure CLI Spray - ASN 53667
KQL Query
KQL Query
KQL Query from file: Detecting Commvault Exploitation in Azure
KQL Query from file: MailItemsAccessed Defense
KQL Query from file: Hunting fasthttp Bruteforce Campaign
KQL Query from file: Detecting GOLDEN SAML Attack
KQL Query from file: Entra Passkey Addition Threat Detection
KQL Query from file: Detecting Windows Side-Loading DLL attacks
KQL Query from file: Detecting High Risk Passkey Users
KQL Query
KQL Query from file: Azure Cloud Security Monitoring
KQL Query from file: CloudApp Privilege OAuth Grant
KQL Query from file: DefenderXDR Advanced Hunting All-In-One IP Search
KQL Query from file: CloudApp Suspicious Copilot Agent Detection
KQL Query
KQL Query
KQL Query from file: Entra Admin Roles Query
KQL Query from file: M365 Copilot Plugins Inventory Analysis
KQL Query from file: Entra ID Administrative Role (AD-Sync)
Page 470 of 600