Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
5,879 detections
Filters
Last updated
All Time
Detection languages
2,954
1,378
313
289
239
Contributors
1,807
1,529
1,304
180
173
Categories
20,460
11,847
5,879
5,158
4,866
Platforms
3,747
1,857
1,076
782
160
Products / Services
2,241
1,434
1,273
746
582
MITRE Techniques
2,448
2,151
1,129
937
790
CVEs
19
15
9
7
5
IDS Classtypes
834
334
94
23
20
IDS Protocols
689
276
235
117
23
Generic rule content from file: LOLBAS - Execution - Outbound Traffic to Suspicious TLD
KQL Query from file: Malicious NPM Package post install script
KQL Query
KQL Query from file: Social Engineering Attack Detection
KQL Query
KQL Query
KQL Query from file: External connection to High Risk Countries
KQL Query from file: Detecting Twill Typhoon VSCode Exploit
KQL Query from file: Detecting Phishing Emails with Cloudflare R2 URLs
KQL Query
KQL Query from file: Discord Invite Hijacking Detection
KQL Query from file: KQLWiz PDF NTLM Leak Detector
KQL Query
KQL Query from file: Golden Chickens TerraStealerV2 Malware Detection
KQL Query
KQL Query
KQL Query from file: Tracking Proton66 Activity with KQL
KQL Query from file: CVE-2024-38200 NTLM Exposure Detection
KQL Query from file: CVE-2024-43452 PoC Detection
KQL Query from file: Hunting VEILDrive C2
KQL Query from file: Muddled Libra
Page 268 of 280