Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
3,750 detections
Filters
Last updated
All Time
Detection languages
2,544
328
307
253
149
Contributors
953
720
641
297
173
Categories
1,245
994
880
773
476
Platforms
2,850
1,449
1,229
356
73
Products / Services
10,683
9,759
6,695
4,421
3,750
MITRE Techniques
1,096
989
950
912
820
CVEs
17
6
2
1
1
IDS Classtypes
9
4
3
2
2
IDS Protocols
21
1
KQL Query
This query visualises emails with Phish detections (Normal confidence) summarizing the data by Delivery Location.
KQL Query
This query visualises total inbound emails with Spam detections.
KQL Query from file: Monitor Copilot Agent for SharePoint
KQL Query
KQL Query
This query visualises top 15 users targeted with Spam with summarized spam detections.
KQL Query from file: The Hunt for QR Phisher
KQL Query from file: Sentinel UEBA Privilege Escalation Detection
This query visualises total inbound emails with Spam detections summarizing the data by the top 15 email sender P2 domain (SenderFromDomain).
KQL Query from file: Data Exfiltration via Microsoft Teams
KQL Query
This query visualises emails with Spam detections (Normal confidence) summarizing the data by Delivery Location.
KQL Query
KQL Query from file: Entra Cross-Tenant Activity Monitoring
KQL Query
KQL Query from file: Detecting M365 Copilot Shared Agent
KQL Query from file: Hunting Malicious Copilot Agent
KQL Query from file: Nation State Actors via Microsoft Graph
KQL Query
Page 147 of 179