Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
837 detections
Filters
Last updated
All Time
Detection languages
672
42
37
25
22
Contributors
227
154
141
123
42
Categories
20,440
11,814
5,871
5,145
4,864
837
Platforms
747
156
83
82
41
Products / Services
773
85
73
71
50
MITRE Techniques
375
287
237
187
184
CVEs
5
1
1
1
1
IDS Classtypes
3
3
2
IDS Protocols
5
3
This query visualises total inbound emails with Spam detections.
This query visualises top 15 users targeted with Spam with summarized spam detections.
KQL Query from file: The Hunt for QR Phisher
This query visualises total inbound emails with Spam detections summarizing the data by the top 15 email sender P2 domain (SenderFromDomain).
This query visualises emails with Spam detections (Normal confidence) summarizing the data by Delivery Location.
KQL Query from file: Sniffing Out UNC3944 on Teams
KQL Query from file: The Hunt for Blob Phishing Mail Domain
This query visualises emails with Spam detections (High confidence) summarizing the data by Delivery Location.
KQL Query from file: Social Engineering Attack Detection
KQL Query from file: Threat hunting voice phishing for Teams
KQL Query from file: MailItemsAccessed Defense
This query visualises total emails with Spam detections over time summarizing the data daily
KQL Query from file: DefenderXDR Advanced Hunting All-In-One IP Search
KQL Query from file: MDO - Enhancing Email Security with NRD Filtering
KQL Query from file: Sneaky 2FA MDO Detection
KQL Query
KQL Query
This query visualises top 10 users targeted with Spam.
KQL Query from file: Sentinel All-In-One UPN ThreatHunt
KQL Query from file: LockBit Black Ransomware
This query visualises total inbound emails which has any Bulk complaint level.
Page 33 of 40