Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
696 detections
Filters
Last updated
All Time
Detection languages
332
134
106
55
25
Contributors
115
100
66
62
55
Categories
136
129
107
104
84
Platforms
324
178
85
83
80
Products / Services
134
112
104
52
47
MITRE Techniques
18,127
15,648
12,596
8,407
6,231
CVEs
2
2
2
2
1
IDS Classtypes
48
29
11
7
6
IDS Protocols
66
20
11
6
3
KQL Query from file: Azure AI Security Finding Report
KQL Query
KQL Query from file: Detecting BYOVDLL Abuse
KQL Query from file: Threat Hunting - MDE Network Intrusion Discovery
KQL Query
KQL Query from file: One-Click ANY RUN Storm-1747 KQL Scan
KQL Query from file: Threat Intelligence Data from Sentinel UEBA2
KQL Query
KQL Query from file: Tracking The Most Dangerous Entra Admin Role
KQL Query from file: Hunting DragonForce with ANY.RUN Threat Intelligence
KQL Query
KQL Query from file: Internet facing devices vulnerablility report
KQL Query from file: Exposure Management - Slim's Metric (MaxCVSS-DAW)
KQL Query from file: Detecting Copilot Studio Bot Creation
KQL Query from file: CVE-2024-3094 with CVSS Score 10
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 10032025
KQL Query
KQL Query
KQL Query
KQL Query from file: Threat Hunting Mshta with Sentinel TI
KQL Query
Page 21 of 34