Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
3,867 detections
Filters
Last updated
All Time
Detection languages
2,526
525
299
218
131
Contributors
999
706
554
263
188
Categories
1,449
1,199
1,091
793
576
Platforms
39,952
7,270
6,537
3,867
3,651
Products / Services
1,756
1,449
1,121
438
406
MITRE Techniques
1,889
1,392
913
814
727
CVEs
12
5
4
3
2
IDS Classtypes
10
7
6
6
5
IDS Protocols
37
2
1
KQL Query
KQL Query from file: Azure CLI Spray - ASN 53667
KQL Query from file: Detecting Commvault Exploitation in Azure
KQL Query from file: Hunting fasthttp Bruteforce Campaign
KQL Query from file: Detecting GOLDEN SAML Attack
KQL Query from file: Entra Passkey Addition Threat Detection
KQL Query from file: Detecting High Risk Passkey Users
KQL Query
KQL Query from file: Overprivileged Admin-Consented OAuth Applications
KQL Query from file: CloudApp Privilege OAuth Grant
KQL Query from file: DefenderXDR Advanced Hunting All-In-One IP Search
KQL Query from file: CloudApp Suspicious Copilot Agent Detection
KQL Query
KQL Query from file: Entra Admin Roles Query
KQL Query from file: Entra ID Administrative Role (AD-Sync)
KQL Query from file: Detecting TeamsPhisher attack with Azure Sentinel
KQL Query
KQL Query from file: Azure cloud account takeover
KQL Query
KQL Query from file: Entra QR Code Sign-In KQL Detection
KQL Query from file: Check for Entra Legacy TLS Login
Page 158 of 185