Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
3,613 detections
Filters
Last updated
All Time
Detection languages
1,725
690
264
214
190
Contributors
985
505
494
256
209
Categories
814
787
728
629
473
Platforms
2,069
629
488
459
346
Products / Services
769
666
525
193
185
MITRE Techniques
18,116
15,638
12,587
8,397
6,227
3,613
CVEs
14
10
5
4
3
IDS Classtypes
73
48
35
10
5
IDS Protocols
119
22
19
10
4
KQL Query from file: Detect Privilege Admin under AiTM attack
KQL Query from file: Threat Intelligence Data from Sentinel UEBA
KQL Query from file: Hunting Malicious Copilot Agent
This query visualises total emails with Spam detections over time by various Spam Detection technologies/controls.
KQL Query
KQL Query from file: Detecting Abuse of Wevtutil.exe in LOLBAS Attacks
KQL Query from file: Hunting Rockstar 2FA
KQL Query
KQL Query from file: Azure Storage Blob - Misconfiguration Check
KQL Query from file: Threat hunting voice phishing for Teams
KQL Query from file: MailItemsAccessed Defense
KQL Query from file: External Attack Surface Monitoring KQL
KQL Query from file: Azure Cloud Security Monitoring
KQL Query from file: DefenderXDR Advanced Hunting All-In-One IP Search
KQL Query
KQL Query from file: M365 Copilot Plugins Inventory Analysis
KQL Query from file: Detecting Mamba 2FA phishing-as-a-service
KQL Query
KQL Query
KQL Query from file: The Hunt for Top 10 Self Hosted AI
KQL Query from file: Hunting New Variant of Snake Keylogger
Page 146 of 173