Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
2,983 detections
Filters
Last updated
All Time
Detection languages
1,487
513
403
239
167
Contributors
986
658
304
198
109
Categories
916
822
673
591
452
Platforms
39,960
7,270
6,537
3,868
3,651
2,983
Products / Services
1,229
704
443
309
200
MITRE Techniques
1,053
824
459
384
348
CVEs
17
16
16
10
10
IDS Classtypes
24
7
7
4
3
IDS Protocols
49
1
Detects when a Microsoft Cloud App Security reported for users whose account were terminated in Azure AD, but still perform activities in other platforms such as AWS or Salesforce.
This is especially relevant for users who use another account to manage resources, since these accounts are often not terminated when a user leaves the company.
This is especially relevant for users who use another account to manage resources, since these accounts are often not terminated when a user leaves the company.
Page 143 of 143