Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
4,867 detections
Filters
Last updated
All Time
Detection languages
1,758
1,593
604
243
199
Contributors
944
801
787
614
315
Categories
20,463
11,851
5,879
5,159
4,867
Platforms
3,712
737
613
406
100
Products / Services
1,458
648
498
272
235
MITRE Techniques
1,330
1,214
889
785
772
CVEs
7
5
5
5
5
IDS Classtypes
546
20
16
5
4
IDS Protocols
417
66
60
39
13
ClickFix style social engineering cluster delivering Mistic and ModeloRAT
Lightweight remote access trojan deployed in recruiter-themed social engineering
IoT botnet malware family used for DDoS and proxy infrastructure
ClickFix style social engineering cluster delivering Mistic and ModeloRAT
High-velocity ransomware-as-a-service with aggressive leak-site extortion
IoT botnet malware family used for DDoS and proxy infrastructure
Stealthy backdoor MLTBackdoor linked to KongTuke ClickFix and ModeloRAT campaigns
IoT botnet malware family used for DDoS and proxy infrastructure
High-velocity ransomware-as-a-service with aggressive leak-site extortion
Lumma C2Beacon
YARA
Infostealer-as-a-service targeting browser credentials and crypto wallets
Rust-based macOS infostealer implant embedding prompt injection payloads
Latin American banking trojan using DLL side-loading and overlay attacks
Latin American banking trojan using DLL side-loading and overlay attacks
Rust-based macOS infostealer implant embedding prompt injection payloads
Rust-based macOS infostealer implant embedding prompt injection payloads
Latin American banking trojan using DLL side-loading and overlay attacks
Cloud extortion group exploiting exposed credentials and storage
Phishing-as-a-Service kit abusing OAuth device code flow against Microsoft 365
Phishing-as-a-Service kit abusing OAuth device code flow against Microsoft 365
Campaign converting compromised FortiGate firewalls into credential stealers
Latin American banking trojan using DLL side-loading and overlay attacks
Page 82 of 232