Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
5 detections
Filters
Last updated
All Time
Detection languages
4
1
Contributors
2
2
1
Categories
2
2
1
1
1
Platforms
3
2
1
Products / Services
3
1
1
1
1
MITRE Techniques
18,114
15,633
12,576
8,388
6,215
Malvertising loader delivering CastleStealer via malicious Google Ads
KQL Query
KQL Query from file: Threat Intelligence Data from Sentinel UEBA2
This query visualises total emails with Malware detections over time summarizing the data daily by Delivery Location.
ZLoader was delivered in a campaign in late summer 2021. This campaign was tweeted by @MsftSecIntel on twitter.