Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
2,831 detections
Filters
Last updated
All Time
Detection languages
1,374
495
363
281
175
Contributors
848
453
393
252
188
Categories
20,440
11,814
5,871
5,145
4,864
2,831
Platforms
1,448
916
693
670
264
Products / Services
994
700
613
469
216
MITRE Techniques
1,239
911
484
481
388
CVEs
6
5
2
1
1
IDS Classtypes
15
10
6
5
3
IDS Protocols
39
KQL Query from file: CloudApp Privilege OAuth Grant
KQL Query from file: CloudApp Suspicious Copilot Agent Detection
KQL Query
KQL Query from file: Entra Admin Roles Query
KQL Query
KQL Query from file: Azure cloud account takeover
KQL Query
KQL Query from file: OAuth app using the OD file picker permission
KQL Query
KQL Query from file: Multi-Cloud DefenderXDR KQL Threat Detection
KQL Query from file: Azure AI Security Finding Report
KQL Query from file: Sentinel All-In-One UPN ThreatHunt
KQL Query
KQL Query from file: Detecting EXO MS Graph Enumeration Attacks
KQL Query from file: Technique profile eDiscovery misuse detection
KQL Query from file: ATP Detection for Critical Identities
KQL Query from file: KQL to check Azure API spray attacks
KQL Query
KQL Query from file: Check for Azure Outdated Security Protocols
KQL Query from file: Detecting Teams Red Team Tool ConvoC2
KQL Query from file: Detecting Copilot Studio Bot Creation
Page 113 of 135