Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,235 detections
Filters
Last updated
All Time
Detection languages
734
214
105
78
51
Contributors
206
187
159
111
90
Categories
396
296
264
260
247
Platforms
492
314
281
204
110
Products / Services
379
234
152
109
106
MITRE Techniques
18,123
15,639
12,581
8,394
6,215
1,235
CVEs
9
9
4
4
4
IDS Classtypes
11
6
4
2
1
IDS Protocols
10
5
3
KQL Query from file: Detecting External Microsoft Teams Spray
KQL Query
KQL Query
KQL Query
KQL Query
KQL Query from file: Microsoft Entra Identity Attack Threat Detection
KQL Query
KQL Query
KQL Query from file: Sentinel UEBA Privilege Escalation Detection
KQL Query from file: Data Exfiltration via Microsoft Teams
KQL Query from file: NEW Real-time Anomalous Token Detection
KQL Query from file: Malicious FIDO2 Registration Threat Detection
KQL Query from file: Attacker in the Middle Precision Detection
KQL Query from file: Detect Privilege Admin under AiTM attack
KQL Query
KQL Query from file: Nation State Actors via Microsoft Graph
KQL Query
KQL Query
KQL Query from file: Critical Identities OAuth Grant
KQL Query
KQL Query
Page 47 of 59