Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
4,308 detections
Filters
Last updated
All Time
Detection languages
2,033
733
398
298
243
Contributors
1,048
740
503
372
239
Categories
20,438
11,829
5,873
5,150
4,864
4,308
Platforms
2,570
792
615
382
319
Products / Services
767
739
659
512
348
MITRE Techniques
2,347
917
847
814
635
CVEs
9
6
6
6
5
IDS Classtypes
81
66
44
14
14
IDS Protocols
136
79
11
7
4
KQL Query from file: Detect Privilege Admin under AiTM attack
KQL Query from file: Threat Intelligence Data from Sentinel UEBA
KQL Query from file: Hunting Malicious Copilot Agent
KQL Query from file: Detecting FIDO2 Passkey Abuse
KQL Query
KQL Query
KQL Query from file: Exploring M365 Accounts Investigation
KQL Query
KQL Query from file: Global Admin Entra Cookie with Chrome ZeroDay
KQL Query from file: BadSuccessor Detection
KQL Query from file: Hunting malicious oauth grant by phished user
KQL Query from file: Hunting Rockstar 2FA
KQL Query from file: Monitor Azure API Secrets Extraction
KQL Query
KQL Query from file: MailItemsAccessed Defense
KQL Query from file: Detecting GOLDEN SAML Attack
KQL Query from file: Entra Passkey Addition Threat Detection
KQL Query from file: Detecting High Risk Passkey Users
KQL Query
KQL Query from file: Detecting Mamba 2FA phishing-as-a-service
KQL Query
Page 174 of 206