Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,235 detections
Filters
Last updated
All Time
Detection languages
734
214
105
78
51
Contributors
206
187
159
111
90
Categories
396
296
264
260
247
Platforms
492
314
281
204
110
Products / Services
379
234
152
109
106
MITRE Techniques
18,123
15,639
12,581
8,394
6,215
1,235
CVEs
9
9
4
4
4
IDS Classtypes
11
6
4
2
1
IDS Protocols
10
5
3
KQL Query from file: Global Admin Entra Cookie with Chrome ZeroDay
KQL Query from file: Conditional Access Report
KQL Query
KQL Query from file: Monitor Azure API Secrets Extraction
KQL Query from file: Azure CLI Spray - ASN 53667
KQL Query
KQL Query from file: MailItemsAccessed Defense
KQL Query from file: Entra Passkey Addition Threat Detection
KQL Query from file: Detecting High Risk Passkey Users
KQL Query
KQL Query from file: CloudApp Privilege OAuth Grant
KQL Query from file: DefenderXDR Advanced Hunting All-In-One IP Search
KQL Query
KQL Query
KQL Query from file: Entra Admin Roles Query
KQL Query from file: Entra ID Administrative Role (AD-Sync)
KQL Query
KQL Query from file: Azure cloud account takeover
KQL Query
KQL Query from file: Sentinel All-In-One UPN ThreatHunt
KQL Query
Page 48 of 59