Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,310 detections
Filters
Last updated
All Time
Detection languages
682
264
155
72
49
Contributors
237
195
187
166
110
Categories
345
308
229
217
143
Platforms
472
424
224
173
144
Products / Services
264
262
200
176
104
MITRE Techniques
18,116
15,638
12,587
8,397
6,227
1,310
CVEs
5
4
3
3
3
IDS Classtypes
103
67
24
23
12
IDS Protocols
167
51
16
14
7
KQL Query from file: Detect Microsoft Graph API Abuse
This query visualises total emails with Phish detections over time summarizing the data daily by Delivery Location.
KQL Query from file: Detecting External Microsoft Teams Spray
KQL Query
KQL Query from file: Sentinel All-In-One IP ThreatHunt
KQL Query
KQL Query
KQL Query from file: Microsoft Entra Identity Attack Threat Detection
KQL Query from file: The Hunt for QR Phisher
KQL Query from file: Detect Privilege Admin under AiTM attack
KQL Query
KQL Query from file: Threat Intelligence Data from Sentinel UEBA
KQL Query from file: Nation State Actors via Microsoft Graph
KQL Query
KQL Query from file: Detecting FIDO2 Passkey Abuse
KQL Query from file: defendnot detection
KQL Query
KQL Query from file: Remote code execution exploit chain in OpenVPN
KQL Query from file: The Hunt for Blob Phishing Mail Domain
KQL Query from file: Hunting malicious oauth grant by phished user
KQL Query from file: Hunting Rockstar 2FA
Page 49 of 63