Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,310 detections
Filters
Last updated
All Time
Detection languages
682
264
155
72
49
Contributors
237
195
187
166
110
Categories
345
308
229
217
143
Platforms
472
424
224
173
144
Products / Services
264
262
200
176
104
MITRE Techniques
18,116
15,638
12,587
8,397
6,227
1,310
CVEs
5
4
3
3
3
IDS Classtypes
103
67
24
23
12
IDS Protocols
167
51
16
14
7
KQL Query from file: MDO Email Threat Classification By ISP
KQL Query from file: MDO Email Threat Classification By Country
KQL Query
KQL Query from file: Threat Hunting Mshta with Sentinel TI
KQL Query
KQL Query
KQL Query from file: Enhanced Cloudflare Phishing Email Detections
KQL Query
KQL Query from file: Monthly Report Entra Eligible Role Activation
KQL Query
KQL Query from file: CVE-2025-4664 Chrome flaw with public exploit
KQL Query from file: HTTP Client Tools Exploitation for ATO Detection
KQL Query
KQL Query
KQL Query from file: Hunt for High Volume Phish ISP
KQL Query from file: Outlook New Requirements for High‐Volume Senders
KQL Query from file: CVE-2024-38200 NTLM Exposure Detection
KQL Query from file: Critical Vulnerability in Elastic Kibana
KQL Query from file: Blob URIs creation trend analysis
KQL Query
Page 52 of 63