Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,310 detections
Filters
Last updated
All Time
Detection languages
682
264
155
72
49
Contributors
237
195
187
166
110
Categories
345
308
229
217
143
Platforms
472
424
224
173
144
Products / Services
264
262
200
176
104
MITRE Techniques
18,116
15,638
12,587
8,397
6,227
1,310
CVEs
5
4
3
3
3
IDS Classtypes
103
67
24
23
12
IDS Protocols
167
51
16
14
7
KQL Query from file: Detecting Phishing Emails with Cloudflare R2 URLs
KQL Query
KQL Query
KQL Query from file: Tracking The Most Dangerous Entra Admin Role
KQL Query from file: Phishing campaigns leveraging Microsoft Forms
KQL Query from file: Brands Impersonation Phishing Trend
KQL Query
KQL Query from file: Perimeter Defense - Attack Surface Reduction
KQL Query from file: OAuth App for BEC & Phishing Detection
KQL Query
KQL Query from file: Internet facing devices vulnerablility report
KQL Query from file: CVE-2024-7971 Patch Prioritization
KQL Query from file: Hunting Zloader DNS Tunneling
KQL Query from file: CVE-2024-26234 and CVE-2024-29988
KQL Query
KQL Query from file: Exposure Management - Slim's Metric (MaxCVSS-DAW)
KQL Query from file: CVE-2024-3094 with CVSS Score 10
KQL Query from file: KQL URL Protection Report
KQL Query from file: Honeypot Threat Intelligence (TI) Data
KQL Query
KQL Query from file: Discord Invite Hijacking Detection
Page 51 of 63