Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
4,866 detections
Filters
Last updated
All Time
Detection languages
1,757
1,593
604
243
199
Contributors
944
801
787
614
315
Categories
20,460
11,847
5,879
5,158
4,866
Platforms
3,711
737
612
405
100
Products / Services
1,458
648
498
272
235
MITRE Techniques
1,330
1,214
888
785
772
CVEs
7
5
5
5
5
IDS Classtypes
546
20
16
5
4
IDS Protocols
417
66
60
39
13
Infostealer-as-a-service targeting browser credentials and crypto wallets
Stealthy backdoor MLTBackdoor linked to KongTuke ClickFix and ModeloRAT campaigns
Photo-themed ZIP phishing campaign dropping a Node.js implant
Infostealer-as-a-service targeting browser credentials and crypto wallets
Stealthy backdoor MLTBackdoor linked to KongTuke ClickFix and ModeloRAT campaigns
IoT botnet malware family used for DDoS and proxy infrastructure
Infostealer-as-a-service targeting browser credentials and crypto wallets
High-velocity ransomware-as-a-service with aggressive leak-site extortion
Infostealer-as-a-service targeting browser credentials and crypto wallets
Lumma NetworkIOC
YARA
Infostealer-as-a-service targeting browser credentials and crypto wallets
IoT botnet malware family used for DDoS and proxy infrastructure
Supply chain worm targeting npm packages and GitHub Actions, linked to Shai-Hulud/Hades lineage
ClickFix style social engineering cluster delivering Mistic and ModeloRAT
Latin American banking trojan using DLL side-loading and overlay attacks
Rust-based macOS infostealer implant embedding prompt injection payloads
Cloud extortion group exploiting exposed credentials and storage
Rust-based macOS infostealer implant embedding prompt injection payloads
Rust-based macOS infostealer implant embedding prompt injection payloads
Cloud extortion group exploiting exposed credentials and storage
Cloud extortion group exploiting exposed credentials and storage
Rust-based macOS infostealer implant embedding prompt injection payloads
Page 98 of 232