Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
23 detections
Filters
Last updated
All Time
Detection languages
8
5
4
3
2
Contributors
20
2
1
Categories
13
11
10
9
5
Platforms
16
13
4
3
2
Products / Services
17
5
2
2
1
MITRE Techniques
12
9
9
9
8
CVEs
71
71
64
58
49
23
Detects network requests to Microsoft 365 Copilot Enterprise Search containing suspicious HTML tags or prompt injection keywords in the query parameter, indicating a potential Parameter-to-Prompt (P2P) injection attempt (CVE-2026-42824).
Detects outbound web requests to Bing's 'Search by Image' endpoint where the embedded image URL points to a non-Microsoft domain. This mechanism is used in the SearchLeak attack (CVE-2026-42824) to bypass CSP and exfiltrate data from Microsoft 365 Copilot.
Page 2 of 2