Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,235 detections
Filters
Last updated
All Time
Detection languages
734
214
105
78
51
Contributors
206
187
159
111
90
Categories
396
296
264
260
247
Platforms
492
314
281
204
110
Products / Services
379
234
152
109
106
MITRE Techniques
18,123
15,639
12,581
8,394
6,215
1,235
CVEs
9
9
4
4
4
IDS Classtypes
11
6
4
2
1
IDS Protocols
10
5
3
KQL Query from file: Perimeter Defense - Attack Surface Reduction
KQL Query from file: Identity Blast Radius 2
KQL Query from file: Vulnerability Profile: CVE-2024-30040 (Zero-day)
KQL Query from file: DefenderXDR Exposure Management for CVE-2024-3094
KQL Query from file: CVE-2024-26234 and CVE-2024-29988
KQL Query from file: Exposure Management - Slim's Metric (MaxCVSS-DAW)
KQL Query from file: Detecting Copilot Studio Bot Creation
KQL Query
KQL Query
KQL Query from file: Detect Copilot Plugin Installation
KQL Query from file: CVE-2024-38063 CVSS 9.8 Prioritization
KQL Query from file: Identity Blast Radius
KQL Query
KQL Query
KQL Query
KQL Query from file: Monthly Report Entra Eligible Role Activation
KQL Query from file: Hunting AI Recall on Windows 11 24H2
KQL Query from file: Detecting Windows Downdate Abuse
SPL Query
KQL Query from file: Git Critical Vulnerability CVE-2024-32002
Page 50 of 59