Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
2,831 detections
Filters
Last updated
All Time
Detection languages
1,374
495
363
281
175
Contributors
848
453
393
252
188
Categories
20,440
11,814
5,871
5,145
4,864
2,831
Platforms
1,448
916
693
670
264
Products / Services
994
700
613
469
216
MITRE Techniques
1,239
911
484
481
388
CVEs
6
5
2
1
1
IDS Classtypes
15
10
6
5
3
IDS Protocols
39
KQL Query
KQL Query
KQL Query from file: Sentinel UEBA Privilege Escalation Detection
KQL Query
KQL Query from file: Entra Cross-Tenant Activity Monitoring
KQL Query
KQL Query from file: Detecting M365 Copilot Shared Agent
KQL Query from file: Nation State Actors via Microsoft Graph
KQL Query
KQL Query from file: Detecting FIDO2 Passkey Abuse
KQL Query
KQL Query
KQL Query from file: Critical Identities OAuth Grant
KQL Query
KQL Query from file: Hunting malicious oauth grant by phished user
KQL Query from file: EntraFalcon Detection
KQL Query
KQL Query from file: Monitor Azure API Secrets Extraction
KQL Query
KQL Query from file: MailItemsAccessed Defense
KQL Query from file: AWS NoSuchBucket Check
Page 112 of 135