Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,593 detections
Filters
Last updated
All Time
Detection languages
1,146
134
65
63
53
Contributors
368
274
239
197
70
Categories
980
373
271
227
139
Platforms
866
505
164
158
149
Products / Services
944
297
133
113
108
MITRE Techniques
18,113
15,640
12,591
8,389
6,208
1,593
CVEs
2
1
1
1
1
IDS Classtypes
18
5
4
1
1
IDS Protocols
15
8
4
3
KQL Query from file: Phishing campaigns leveraging Microsoft Forms
KQL Query from file: Brands Impersonation Phishing Trend
KQL Query from file: Perimeter Defense - Attack Surface Reduction
KQL Query from file: OAuth App for BEC & Phishing Detection
This query visualises total inbound emails which has any Bulk complaint level.
KQL Query from file: KQL URL Protection Report
KQL Query from file: Discord Invite Hijacking Detection
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan
KQL Query from file: AppSheet.com abused to send Phish
KQL Query from file: MDO Email Threat Classification By ISP
KQL Query
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 12052025
KQL Query
KQL Query from file: MDO Email Threat Classification By Country
This query visualises total emails with Spam detections over time summarizing the data daily by Delivery Location.
KQL Query from file: Threat Hunting Microsoft Sway Quishing
KQL Query
KQL Query from file: Defending against dot zip domain phishing attack
KQL Query from file: Golden Chickens TerraStealerV2 Malware Detection
KQL Query
KQL Query
Page 62 of 76