Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

7 detections

This rule identifies devices that are both critical to the organization (based on exposure graph data) and are vulnerable to CVE-2024-30040. It leverages Microsoft Defender Vulnerability Management data to correlate critical assets with known vulnerabilities.
avatar
Garyson Pereira@GaryPereira26
avatar
Detections.ai Community
1 year ago
0127
KQL Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
5086
KQL Query from file: Entra Admin Roles Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
4084
KQL Query from file: Entra QR Code Sign-In KQL Detection
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
7081
KQL Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
3059
KQL Query from file: CVE-2024-26234 and CVE-2024-29988
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
2054
KQL Query from file: Monthly Report Entra Eligible Role Activation
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
2038