Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
6 detections
Filters
Last updated
All Time
Detection languages
6
Contributors
4
2
Categories
3
2
1
1
1
Platforms
4
2
1
Products / Services
2
2
2
1
1
MITRE Techniques
18,114
15,633
12,576
8,388
6,214
KQL Query from file: Threat Hunting AzureHound Usage
KQL Query
KQL Query from file: Detecting Copilot Studio Bot Creation
KQL Query from file: MDE KQL to detect UAC bypass of Fickle Stealer
'This hunting query looks for new Service Principals running queries that have not previously been seen running queries.'
This query searches for not onboarded devices with a specific Suffix