Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
4 detections
Filters
Last updated
All Time
Detection languages
4
Contributors
2
2
Categories
2
2
1
1
1
Platforms
4
1
1
Products / Services
2
2
1
1
MITRE Techniques
18,115
15,635
12,576
8,388
6,215
KQL Query from file: GraphRunner Recon Detection & Response
KQL Query from file: Entra QR Code Sign-In KQL Detection
'This query over Microsoft Entra ID sign-in activity highlights Microsoft Entra ID apps with
an unusually high ratio of distinct geolocations versus total number of authentications'
an unusually high ratio of distinct geolocations versus total number of authentications'
This query shows details about all approved Entra ID Governance Access Packages assignments. The results include the time the request was created and approved along with the justification text provided by the requestor and the approver.