Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
4,421 detections
Filters
Last updated
All Time
Detection languages
4,217
105
40
25
13
Contributors
1,327
1,003
725
627
332
Categories
2,253
2,239
1,434
1,144
973
Platforms
4,107
453
295
83
82
Products / Services
10,670
9,758
6,693
4,421
3,749
MITRE Techniques
886
774
552
505
456
CVEs
18
12
12
12
10
IDS Classtypes
1,868
466
446
362
230
IDS Protocols
2,366
846
388
301
93
ET WEB_SPECIFIC_APPS Netgear password.cgi http_passwd Parameter Buffer Overflow Attempt (CVE-2023-38925)
ET WEB_SPECIFIC_APPS Tenda WifiExtraSet wpapsk_crypto Parameter Buffer Overflow Attempt (CVE-2025-25663, CVE-2025-10838, CVE-2025-7596, CVE-2025-5799)
ET WEB_SPECIFIC_APPS Tenda SetVirtualServerCfg list Parameter Buffer Overflow Attempt (CVE-2025-29361, CVE-2024-4112, CVE-2024-40416, CVE-2024-10282)
ET WEB_SPECIFIC_APPS Tenda openSchedWifi Multiple Parameters Buffer Overflow Attempt (CVE-2025-46035)
ET WEB_SPECIFIC_APPS Tenda setVlanInfo Multiple Parameters Buffer Overflow Attempt (CVE-2023-46060, CVE-2023-51093)
ET WEB_SPECIFIC_APPS Tenda setAdvPolicyData rebootTime Parameter Buffer Overflow Attempt
ET WEB_SPECIFIC_APPS D-Link thdbase.asp Multiple Parameters Buffer Overflow Attempt
ET WEB_SPECIFIC_APPS D-Link myMusic.cgi Multiple Parameters Command Injection Attempt (CVE-2024-7922)
ET WEB_SPECIFIC_APPS D-Link SetWLanRadioSecurity Key Parameter Command Injection Attempt (CVE-2024-48634)
ET WEB_SPECIFIC_APPS D-Link SetWLanRadioSettings Multiple XML Tags Buffer Overflow Attempt (CVE-2023-44839, CVE-2023-43241)
ET WEB_SPECIFIC_APPS D-Link showMACfilterMAC flag_5g Parameter Buffer Overflow Attempt (CVE-2023-43239)
ET WEB_SPECIFIC_APPS D-Link form2Dhcpip.cgi nvmacaddr Parameter Buffer Overflow Attempt (CVE-2023-43238)
ET WEB_SPECIFIC_APPS Ivanti Connect Secure CRLF Injection Remote Code Execution Attempt (CVE-2024-37404)
ET MALWARE TA569 Middleware Server Domain in TLS SNI (cronapiworkersvc .com)
ET MALWARE Observed DNS Query to Malicious Domain (tamku .shop)
ET INFO DYNAMIC_DNS Query to a *.freeddns .tokyo domain
ET INFO DYNAMIC_DNS Query to a *.itafricagroup .com domain
ET INFO Blockchain RPC Domain in TLS SNI (rpc .ftm .tools)
ET INFO Blockchain RPC Domain in TLS SNI (arbitrum .one)
ET INFO DYNAMIC_DNS HTTP Request to a *.anchorchain .co .za domain
ET EXPLOIT_KIT LandUpdate808 Domain (virtvan .com) in TLS SNI
Page 202 of 211