Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,735 detections
Filters
Last updated
All Time
Detection languages
1,216
144
98
80
59
Contributors
496
324
298
171
55
Categories
20,440
11,814
5,871
5,145
4,864
1,735
Platforms
1,163
328
260
244
163
Products / Services
1,244
200
166
146
138
MITRE Techniques
983
923
765
247
245
CVEs
2
1
IDS Classtypes
68
33
19
10
8
IDS Protocols
90
24
15
15
KQL Query from file: Exposure Management + Defender for Office 365
KQL Query from file: Detecting Phishing Emails with Cloudflare R2 URLs
KQL Query from file: LockBit Black Ransomware
This query visualises total emails with Spam detections summarizing the data by various Spam detection technologies/controls.
KQL Query from file: DocuShield - NRT Anti-Impersonation Email Purge
KQL Query from file: Phishing campaigns leveraging Microsoft Forms
KQL Query from file: Brands Impersonation Phishing Trend
KQL Query from file: Perimeter Defense - Attack Surface Reduction
KQL Query from file: OAuth App for BEC & Phishing Detection
KQL Query from file: M365 Copilot Chat SafeLink Monitoring
This query visualises total inbound emails which has any Bulk complaint level.
KQL Query from file: KQL URL Protection Report
KQL Query from file: AppSheet.com abused to send Phish
KQL Query from file: MDO Email Threat Classification By ISP
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 12052025
KQL Query from file: MDO Email Threat Classification By Country
This query visualises total emails with Spam detections over time summarizing the data daily by Delivery Location.
KQL Query from file: Threat Hunting Microsoft Sway Quishing
KQL Query
KQL Query from file: Defending against dot zip domain phishing attack
KQL Query
Page 74 of 83