Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,225 detections
Filters
Last updated
All Time
Detection languages
1,118
30
19
17
15
Contributors
391
236
131
85
62
Categories
313
252
228
185
166
Platforms
651
438
268
228
200
Products / Services
10,670
9,758
6,693
4,421
3,749
1,225
MITRE Techniques
264
259
234
217
208
CVEs
8
8
6
6
6
IDS Classtypes
2
2
1
1
1
IDS Protocols
2
1
KQL Query from file: Detecting TeamsPhisher attack with Azure Sentinel
KQL Query
KQL Query
KQL Query
KQL Query from file: RMM Hunting with Sentinel TI
KQL Query from file: Sentinel All-In-One UPN ThreatHunt
KQL Query
KQL Query from file: New Threat Actor Group Signature
KQL Query
KQL Query from file: Detect Power Pwn (aka LOLCopilot) Red Team Tool
KQL Query
KQL Query from file: Critical Monitor for Critical Assets
KQL Query from file: ATP Detection for Critical Identities
KQL Query from file: T1555.003 - Credentials from Web Browsers
KQL Query from file: Threat Intelligence Data from Sentinel UEBA2
KQL Query
KQL Query
KQL Query from file: Sentinel Alerts & MITRE ATT&CK Analysis
KQL Query from file: Entra Risk Events & MITRE ATT&CK Analysis
KQL Query
KQL Query from file: Identity Blast Radius 2
Page 53 of 59