Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,735 detections
Filters
Last updated
All Time
Detection languages
1,216
144
98
80
59
Contributors
496
324
298
171
55
Categories
20,440
11,814
5,871
5,145
4,864
1,735
Platforms
1,163
328
260
244
163
Products / Services
1,244
200
166
146
138
MITRE Techniques
983
923
765
247
245
CVEs
2
1
IDS Classtypes
68
33
19
10
8
IDS Protocols
90
24
15
15
This query visualises total inbound emails with Spam detections summarizing the data by the top 15 email sender P2 domain (SenderFromDomain).
This query visualises emails with Spam detections (Normal confidence) summarizing the data by Delivery Location.
KQL Query
KQL Query from file: Sniffing Out UNC3944 on Teams
This query visualises total emails with Spam detections over time by various Spam Detection technologies/controls.
KQL Query
KQL Query from file: The Hunt for Blob Phishing Mail Domain
KQL Query from file: Hunting malicious oauth grant by phished user
This query visualises emails with Spam detections (High confidence) summarizing the data by Delivery Location.
KQL Query from file: Hunting Rockstar 2FA
KQL Query
KQL Query from file: Threat hunting voice phishing for Teams
This query visualises total emails with Spam detections over time summarizing the data daily
KQL Query from file: MDO - Enhancing Email Security with NRD Filtering
KQL Query from file: Advanced Vishing KQL Detection
KQL Query from file: M365 Copilot Gone Rouge
KQL Query from file: Sneaky 2FA MDO Detection
KQL Query from file: Detecting TeamsPhisher attack with Azure Sentinel
KQL Query from file: Detecting Mamba 2FA phishing-as-a-service
KQL Query
This query visualises top 10 users targeted with Spam.
Page 73 of 83