Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
3,750 detections
Filters
Last updated
All Time
Detection languages
2,544
328
307
253
149
Contributors
953
720
641
297
173
Categories
1,245
994
880
773
476
Platforms
2,850
1,449
1,229
356
73
Products / Services
10,683
9,759
6,695
4,421
3,750
MITRE Techniques
1,096
989
950
912
820
CVEs
17
6
2
1
1
IDS Classtypes
9
4
3
2
2
IDS Protocols
21
1
This query visualises total emails with Spam detections over time summarizing the data daily by Delivery Location.
KQL Query from file: Threat Hunting Microsoft Sway Quishing
KQL Query
KQL Query from file: Defending against dot zip domain phishing attack
KQL Query
KQL Query from file: Detect Copilot Plugin Installation
KQL Query
KQL Query
KQL Query
KQL Query from file: Detecting Misconfigured EXO Transport Rules
KQL Query
KQL Query from file: CVE-2025-21298 Zero-Click RCE
KQL Query from file: Enhanced Cloudflare Phishing Email Detections
KQL Query
KQL Query from file: Monthly Report Entra Eligible Role Activation
KQL Query
KQL Query from file: HTTP Client Tools Exploitation for ATO Detection
KQL Query
KQL Query from file: Any.Run Corrupt File Zero Day Attack
Page 152 of 179