Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,593 detections
Filters
Last updated
All Time
Detection languages
1,146
134
65
63
53
Contributors
368
274
239
197
70
Categories
980
373
271
227
139
Platforms
866
505
164
158
149
Products / Services
944
297
133
113
108
MITRE Techniques
18,113
15,640
12,591
8,389
6,208
1,593
CVEs
2
1
1
1
1
IDS Classtypes
18
5
4
1
1
IDS Protocols
15
8
4
3
KQL Query from file: MDO - Enhancing Email Security with NRD Filtering
KQL Query from file: Advanced Vishing KQL Detection
KQL Query from file: M365 Copilot Gone Rouge
KQL Query from file: Sneaky 2FA MDO Detection
KQL Query from file: Detecting TeamsPhisher attack with Azure Sentinel
KQL Query from file: Detecting Mamba 2FA phishing-as-a-service
KQL Query
This query visualises top 10 users targeted with Spam.
KQL Query from file: Hunting New Variant of Snake Keylogger
KQL Query from file: Detect Power Pwn (aka LOLCopilot) Red Team Tool
KQL Query
KQL Query from file: Critical Monitor for Critical Assets
KQL Query from file: Exposure Management + Defender for Office 365
KQL Query from file: Detecting Phishing Emails with Cloudflare R2 URLs
KQL Query from file: LockBit Black Ransomware
KQL Query
This query visualises total emails with Spam detections summarizing the data by various Spam detection technologies/controls.
This query visualises total inbound emails which has any Bulk complaint level.
KQL Query
KQL Query from file: DocuShield - NRT Anti-Impersonation Email Purge
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 05052025
Page 61 of 76