Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
408 detections
Filters
Last updated
All Time
Detection languages
405
2
1
Contributors
144
114
48
39
36
Categories
281
276
132
105
60
Platforms
381
25
16
7
5
Products / Services
388
318
30
5
4
MITRE Techniques
174
103
44
30
28
CVEs
4
1
1
IDS Classtypes
201
121
21
19
14
IDS Protocols
2,431
868
408
324
97
ET EXPLOIT_KIT LandUpdate808 Domain (forrbes .com) in TLS SNI
ET EXPLOIT_KIT ZPHP Domain in TLS SNI (dotauan .pro)
ET EXPLOIT_KIT ZPHP Domain in TLS SNI (polimakels .com)
ET MALWARE Observed Malicious Domain (significant-adopted-bearing-own .trycloudflare .com in TLS SNI)
ET MALWARE Observed Malicious Domain (tamku .shoplerter .opnetorologies .net in TLS SNI)
ET MALWARE Observed Malicious Domain (tamku .shop in TLS SNI)
ET INFO Blockchain RPC Domain in TLS SNI (mainnet .optimism .io)
ET INFO Blockchain RPC Domain in TLS SNI (polygon-rpc .com)
ET INFO Blockchain RPC Domain in TLS SNI (mainnet .infura .io)
Page 20 of 20