Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
12,583 detections
Filters
Last updated
All Time
Detection languages
5,139
3,901
1,034
828
476
Contributors
2,488
1,655
1,442
1,408
970
Categories
3,444
1,825
1,661
1,578
1,416
Platforms
8,040
1,889
1,334
1,053
778
Products / Services
1,979
1,796
1,633
1,096
1,041
MITRE Techniques
18,116
15,636
12,583
8,393
6,223
CVEs
21
21
21
19
14
IDS Classtypes
136
73
43
15
14
IDS Protocols
150
123
15
12
6
KQL Query
KQL Query from file: Azure cloud account takeover
KQL Query
KQL Query
KQL Query from file: Entra QR Code Sign-In KQL Detection
KQL Query from file: Check for Entra Legacy TLS Login
KQL Query from file: User Sign-in Activity
KQL Query
KQL Query
KQL Query from file: Azure AI Security Finding Report
KQL Query from file: Detecting New Copilot Extensions
KQL Query from file: Detecting BYOVDLL Abuse
KQL Query from file: Threat Hunting - MDE Network Intrusion Discovery
KQL Query from file: TA4557 drops More_Eggs
KQL Query from file: Sentinel All-In-One UPN ThreatHunt
KQL Query
KQL Query
KQL Query from file: New Threat Actor Group Signature
KQL Query
KQL Query
Detects potential PowerShell commands or code within registry run keys
Page 471 of 600