Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,088 detections
Filters
Last updated
All Time
Detection languages
619
191
113
86
47
Contributors
302
211
112
88
54
Categories
481
416
353
192
164
Platforms
726
348
216
136
57
Products / Services
518
292
197
124
88
MITRE Techniques
18,123
15,639
12,581
8,394
6,215
1,088
CVEs
5
5
5
5
4
IDS Classtypes
3
2
1
1
IDS Protocols
3
KQL Query from file: Monitor Privilege User SSPR
KQL Query
KQL Query from file: Nation State Actors via Microsoft Graph
KQL Query
KQL Query
KQL Query from file: Global Admin Entra Cookie with Chrome ZeroDay
KQL Query from file: Azure CLI Spray - ASN 53667
KQL Query from file: Azure Cloud Security Monitoring
KQL Query from file: CloudApp Privilege OAuth Grant
KQL Query
KQL Query from file: Entra Admin Roles Query
KQL Query
KQL Query
KQL Query
KQL Query
KQL Query from file: Tracking The Most Dangerous Entra Admin Role
KQL Query from file: Identity Blast Radius 2
KQL Query from file: CVE-2024-7971 Patch Prioritization
KQL Query from file: Detecting Nation State Actors @ Near Realtime
KQL Query from file: Detecting Copilot Studio Bot Creation
KQL Query from file: Threat Hunting Microsoft Sway Quishing
Page 45 of 52