Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,247 detections
Filters
Last updated
All Time
Detection languages
690
140
94
67
56
Contributors
389
247
199
52
45
Categories
787
411
262
248
188
Platforms
836
265
264
169
66
Products / Services
498
157
148
133
115
MITRE Techniques
18,123
15,639
12,580
8,394
6,215
1,247
CVEs
4
3
2
2
2
IDS Classtypes
70
58
3
3
2
IDS Protocols
66
23
15
12
9
KQL Query from file: Multi-Cloud DefenderXDR KQL Threat Detection
KQL Query from file: Threat Hunting - MDE Network Intrusion Discovery
KQL Query from file: Sentinel All-In-One UPN ThreatHunt
KQL Query
KQL Query from file: New Threat Actor Group Signature
KQL Query from file: Threat Hunting Nation State Actors
KQL Query from file: Critical Monitor for Critical Assets
KQL Query from file: ATP Detection for Critical Identities
KQL Query
KQL Query from file: Threat Intelligence Data from Sentinel UEBA2
KQL Query
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 05052025
KQL Query
KQL Query
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan
KQL Query
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 12052025
KQL Query
KQL Query
KQL Query from file: Defending against dot zip domain phishing attack
KQL Query from file: Golden Chickens TerraStealerV2 Malware Detection
Page 55 of 60