Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
726 detections
Filters
Last updated
All Time
Detection languages
401
142
54
54
27
Contributors
153
152
78
42
33
Categories
227
208
134
132
119
Platforms
466
226
29
29
27
Products / Services
237
212
122
48
21
MITRE Techniques
18,113
15,640
12,591
8,389
6,208
726
CVEs
5
5
5
4
4
IDS Classtypes
7
2
IDS Protocols
6
2
1
KQL Query from file: Detecting External Microsoft Teams Spray
KQL Query
KQL Query from file: Threat hunting voice phishing for Teams
KQL Query from file: DefenderXDR Advanced Hunting All-In-One IP Search
KQL Query from file: Threat Hunting BYOVD Scenarios
KQL Query from file: Detecting TeamsPhisher attack with Azure Sentinel
KQL Query from file: Detecting Mamba 2FA phishing-as-a-service
KQL Query from file: Email Campaign - Exploiting SVG Files and trycloudflare.com to Spread Malware
KQL Query from file: One-Click ANY RUN Storm-1747 KQL Scan
KQL Query from file: LockBit Black Ransomware
KQL Query from file: Hunting DragonForce with ANY.RUN Threat Intelligence
KQL Query
Detects initial execution patterns and stealer activities used by KimJongRAT PE and PowerShell variants, including LNK/HTA execution, certutil decoding, rundll32 execution, and PowerShell-based data collection.
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 05052025
KQL Query from file: Phishing campaigns leveraging Microsoft Forms
KQL Query from file: CVE-2025-32705 Out-of-bounds Read Detection
KQL Query from file: MDO Email Threat Classification By Country
KQL Query from file: Threat Hunting Microsoft Sway Quishing
KQL Query
KQL Query from file: CVE-2025-21298 Zero-Click RCE
KQL Query from file: BlueAlpha GammaDrop Detection
Page 29 of 35