Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
4,867 detections
Filters
Last updated
All Time
Detection languages
1,758
1,593
604
243
199
Contributors
944
801
787
614
315
Categories
20,468
11,855
5,880
5,159
4,867
Platforms
3,712
737
613
406
100
Products / Services
1,458
648
498
272
235
MITRE Techniques
1,330
1,214
889
785
772
CVEs
7
5
5
5
5
IDS Classtypes
546
20
16
5
4
IDS Protocols
417
66
60
39
13
Malvertising loader delivering CastleStealer via malicious Google Ads
Infostealer-as-a-service targeting browser credentials and crypto wallets
ClickFix style social engineering cluster delivering Mistic and ModeloRAT
Lightweight remote access trojan deployed in recruiter-themed social engineering
ClickFix style social engineering cluster delivering Mistic and ModeloRAT
Infostealer-as-a-service targeting browser credentials and crypto wallets
Infostealer-as-a-service targeting browser credentials and crypto wallets
Stealthy backdoor MLTBackdoor linked to KongTuke ClickFix and ModeloRAT campaigns
Lightweight remote access trojan deployed in recruiter-themed social engineering
IoT botnet malware family used for DDoS and proxy infrastructure
Supply chain worm targeting npm packages and GitHub Actions, linked to Shai-Hulud/Hades lineage
MINIRAT C2Beacon
YARA
Lightweight remote access trojan deployed in recruiter-themed social engineering
High-velocity ransomware-as-a-service with aggressive leak-site extortion
Lightweight remote access trojan deployed in recruiter-themed social engineering
IoT botnet malware family used for DDoS and proxy infrastructure
ClickFix style social engineering cluster delivering Mistic and ModeloRAT
Lightweight remote access trojan deployed in recruiter-themed social engineering
Supply chain worm targeting npm packages and GitHub Actions, linked to Shai-Hulud/Hades lineage
Photo-themed ZIP phishing campaign dropping a Node.js implant
Lightweight remote access trojan deployed in recruiter-themed social engineering
Photo-themed ZIP phishing campaign dropping a Node.js implant
Page 97 of 232
