Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

3 detections

'Detects potentially malicious Visual Studio Code (VSCode) extensions installed on a users system, which threat actors might use to control devices and exfiltrate personal information.
Ref: https://blog.checkpoint.com/securing-the-cloud/malicious-vscode-extensions-with-more-than-45k-downloads-steal-pii-and-enable-backdoors/'
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
20132
This query helps reviewing malicious email detections by detection methods
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
2021
This query helps reviewing malware detections by detection methods
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0021