Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
3,750 detections
Filters
Last updated
All Time
Detection languages
2,544
328
307
253
149
Contributors
953
720
641
297
173
Categories
1,245
994
880
773
476
Platforms
2,850
1,449
1,229
356
73
Products / Services
10,683
9,759
6,695
4,421
3,750
MITRE Techniques
1,096
989
950
912
820
CVEs
17
6
2
1
1
IDS Classtypes
9
4
3
2
2
IDS Protocols
21
1
KQL Query from file: MS Teams DLP Playbook
KQL Query from file: Sentinel All-In-One UPN ThreatHunt
KQL Query
KQL Query from file: New Threat Actor Group Signature
KQL Query
KQL Query from file: Detecting EXO MS Graph Enumeration Attacks
KQL Query from file: Email Campaign - Exploiting SVG Files and trycloudflare.com to Spread Malware
KQL Query from file: Hunting New Variant of Snake Keylogger
KQL Query from file: Detect Power Pwn (aka LOLCopilot) Red Team Tool
KQL Query
KQL Query from file: Critical Monitor for Critical Assets
KQL Query from file: Technique profile eDiscovery misuse detection
KQL Query from file: One-Click ANY RUN Storm-1747 KQL Scan
KQL Query from file: ATP Detection for Critical Identities
KQL Query from file: Exposure Management + Defender for Office 365
KQL Query from file: Detecting Phishing Emails with Cloudflare R2 URLs
KQL Query from file: LockBit Black Ransomware
This query visualises total emails with Spam detections summarizing the data by various Spam detection technologies/controls.
This query visualises total inbound emails which has any Bulk complaint level.
KQL Query from file: Hunting DragonForce with ANY.RUN Threat Intelligence
KQL Query from file: DocuShield - NRT Anti-Impersonation Email Purge
Page 150 of 179