Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
3,750 detections
Filters
Last updated
All Time
Detection languages
2,544
328
307
253
149
Contributors
953
720
641
297
173
Categories
1,245
994
880
773
476
Platforms
2,850
1,449
1,229
356
73
Products / Services
10,683
9,759
6,695
4,421
3,750
MITRE Techniques
1,096
989
950
912
820
CVEs
17
6
2
1
1
IDS Classtypes
9
4
3
2
2
IDS Protocols
21
1
KQL Query from file: Detecting FIDO2 Passkey Abuse
KQL Query from file: Sniffing Out UNC3944 on Teams
KQL Query
This query visualises total emails with Spam detections over time by various Spam Detection technologies/controls.
KQL Query from file: Critical Identities OAuth Grant
KQL Query
KQL Query from file: Exploring M365 Accounts Investigation
KQL Query
KQL Query
KQL Query from file: The Hunt for Blob Phishing Mail Domain
KQL Query from file: Hunting malicious oauth grant by phished user
This query visualises emails with Spam detections (High confidence) summarizing the data by Delivery Location.
KQL Query from file: Social Engineering Attack Detection
KQL Query
KQL Query
KQL Query
KQL Query from file: Threat hunting voice phishing for Teams
KQL Query from file: MailItemsAccessed Defense
KQL Query from file: Entra Passkey Addition Threat Detection
KQL Query
This query visualises total emails with Spam detections over time summarizing the data daily
Page 148 of 179