Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
5 detections
Filters
Last updated
All Time
Detection languages
5
Contributors
3
2
Categories
3
2
2
2
1
Platforms
3
3
1
Products / Services
3
2
1
1
1
MITRE Techniques
18,110
15,627
12,575
8,387
6,212
KQL Query from file: The Hunt for Blob Phishing Mail Domain
KQL Query
KQL Query from file: BlueAlpha GammaDrop Detection
This query visualises total emails with Phish-Spoof-internal domain detections summarizing the data by the top 10 email sender P2 domain (SenderFromDomain) and sender P1 domain (SenderMailFromDomain).
'This content is employed to correlate with Microsoft Defender XDR phishing-related alerts. It focuses on instances where a user successfully connects to a phishing URL from a non-Microsoft network device and subsequently makes successful sign-in attempts from the phishing IP address.'