Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
3,750 detections
Filters
Last updated
All Time
Detection languages
2,544
328
307
253
149
Contributors
953
720
641
297
173
Categories
1,245
994
880
773
476
Platforms
2,850
1,449
1,229
356
73
Products / Services
10,683
9,759
6,695
4,421
3,750
MITRE Techniques
1,096
989
950
912
820
CVEs
17
6
2
1
1
IDS Classtypes
9
4
3
2
2
IDS Protocols
21
1
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 05052025
KQL Query from file: Phishing campaigns leveraging Microsoft Forms
KQL Query from file: Brands Impersonation Phishing Trend
KQL Query from file: Perimeter Defense - Attack Surface Reduction
KQL Query from file: OAuth App for BEC & Phishing Detection
KQL Query from file: CVE-2024-7971 Patch Prioritization
KQL Query from file: Vulnerability Profile: CVE-2024-30040 (Zero-day)
KQL Query from file: Detecting Teams Red Team Tool ConvoC2
This query visualises total inbound emails which has any Bulk complaint level.
KQL Query from file: M365 Copilot Chat SafeLink Monitoring
KQL Query from file: M365 Copilot Extensions Threat Monitoring
KQL Query from file: Detecting Copilot Studio Bot Creation
KQL Query from file: CVE-2025-32705 Out-of-bounds Read Detection
KQL Query from file: KQL URL Protection Report
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan
KQL Query from file: AppSheet.com abused to send Phish
KQL Query from file: MDO Email Threat Classification By ISP
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 12052025
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 10032025
KQL Query
KQL Query from file: MDO Email Threat Classification By Country
Page 151 of 179