Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,310 detections
Filters
Last updated
All Time
Detection languages
682
264
155
72
49
Contributors
237
195
187
166
110
Categories
345
308
229
217
143
Platforms
472
424
224
173
144
Products / Services
264
262
200
176
104
MITRE Techniques
18,116
15,638
12,587
8,397
6,227
1,310
CVEs
5
4
3
3
3
IDS Classtypes
103
67
24
23
12
IDS Protocols
167
51
16
14
7
KQL Query from file: Threat hunting voice phishing for Teams
KQL Query from file: CVE-2025-33073 Detection
KQL Query from file: LDAPNightmare POC Detection
KQL Query
KQL Query from file: Advanced Vishing KQL Detection
KQL Query from file: Entra Admin Roles Query
KQL Query from file: Sneaky 2FA MDO Detection
KQL Query from file: Detecting Mamba 2FA phishing-as-a-service
KQL Query
KQL Query
KQL Query
KQL Query from file: Entra QR Code Sign-In KQL Detection
KQL Query
KQL Query from file: Threat Hunting - MDE Network Intrusion Discovery
KQL Query from file: Detecting EXO MS Graph Enumeration Attacks
KQL Query
KQL Query from file: Detect Power Pwn (aka LOLCopilot) Red Team Tool
KQL Query from file: Critical Monitor for Critical Assets
KQL Query
KQL Query
KQL Query from file: Exposure Management + Defender for Office 365
Page 50 of 63