Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
43 detections
Filters
Last updated
All Time
Detection languages
22
11
7
1
1
Contributors
8
7
5
4
4
Categories
13
12
12
9
8
Platforms
18
12
7
4
4
Products / Services
8
7
6
5
4
MITRE Techniques
18,114
15,633
12,576
8,388
6,214
CVEs
5
4
1
1
1
IDS Classtypes
6
1
IDS Protocols
4
2
1
This query finds the 10 latest logons performed by email recipients within 30 minutes after they received known malicious emails. You can use this query to check whether the accounts of the email recipients have been compromised.
Page 3 of 3