Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
5,155 detections
Filters
Last updated
All Time
Detection languages
2,301
1,070
640
289
288
Contributors
918
814
769
696
224
Categories
20,456
11,839
5,876
5,155
4,865
Platforms
2,858
2,017
816
524
213
Products / Services
1,336
1,144
831
576
366
MITRE Techniques
1,822
1,307
787
747
577
CVEs
9
7
7
6
6
IDS Classtypes
538
151
101
57
48
IDS Protocols
375
373
132
64
42
KQL Query
KQL Query from file: DefenderXDR Exposure Management for CVE-2024-3094
KQL Query from file: Hunting Zloader DNS Tunneling
KQL Query from file: CVE-2025-22224 (CVSS 9.3 CRITICAL) Internet facing VMware server discovery
KQL Query from file: M365 Copilot Extensions Threat Monitoring
KQL Query from file: Sentinel Timeroasting KQL detection
KQL Query from file: Honeypot Threat Intelligence (TI) Data
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan
KQL Query
KQL Query
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 12052025
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 10032025
KQL Query
KQL Query
KQL Query from file: Defending against dot zip domain phishing attack
KQL Query
KQL Query from file: Threat Hunting Mshta with Sentinel TI
KQL Query from file: CVE-2024-38063 CVSS 9.8 Prioritization
KQL Query from file: BlueAlpha GammaDrop Detection
KQL Query from file: CVE-2025-24054 NTLM Exploit in the Wild Detection
Page 220 of 246