Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

3 detections

KQL Query from file: Detect Microsoft Graph API Abuse
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
130173
KQL Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
60116
'Identifies instances where Wazuh logged over 400 '403' Web Errors from one IP Address. To onboard Wazuh data into Sentinel please view: https://github.com/wazuh/wazuh-documentation/blob/master/source/azure/monitoring%20activity.rst'
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0025