Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
837 detections
Filters
Last updated
All Time
Detection languages
672
42
37
25
22
Contributors
227
154
141
123
42
Categories
20,440
11,814
5,871
5,145
4,864
837
Platforms
747
156
83
82
41
Products / Services
773
85
73
71
50
MITRE Techniques
375
287
237
187
184
CVEs
5
1
1
1
1
IDS Classtypes
3
3
2
IDS Protocols
5
3
KQL Query from file: DocuShield - NRT Anti-Impersonation Email Purge
KQL Query from file: Phishing campaigns leveraging Microsoft Forms
KQL Query from file: Brands Impersonation Phishing Trend
KQL Query from file: Perimeter Defense - Attack Surface Reduction
KQL Query from file: CVE-2025-32705 Out-of-bounds Read Detection
This query visualises total inbound emails which has any Bulk complaint level.
KQL Query from file: AppSheet.com abused to send Phish
KQL Query from file: MDO Email Threat Classification By ISP
This query visualises total emails with Spam detections over time summarizing the data daily by Delivery Location.
KQL Query from file: Threat Hunting Microsoft Sway Quishing
KQL Query from file: Defending against dot zip domain phishing attack
KQL Query from file: Threat Hunting Mshta with Sentinel TI
KQL Query
KQL Query from file: Detecting Misconfigured EXO Transport Rules
KQL Query from file: Enhanced Cloudflare Phishing Email Detections
KQL Query
KQL Query from file: Any.Run Corrupt File Zero Day Attack
KQL Query from file: Hunt for High Volume Phish ISP
KQL Query from file: Outlook New Requirements for High‐Volume Senders
KQL Query
Page 34 of 40