Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,631 detections
Filters
Last updated
All Time
Detection languages
1,055
161
128
83
72
Contributors
427
386
258
93
93
Categories
923
331
312
289
237
Platforms
768
403
356
303
295
Products / Services
820
308
216
159
157
MITRE Techniques
18,113
15,640
12,591
8,389
6,208
1,631
CVEs
3
2
1
1
1
IDS Classtypes
108
26
18
5
3
IDS Protocols
100
33
20
3
KQL Query from file: Detect Power Pwn (aka LOLCopilot) Red Team Tool
KQL Query from file: Exposure Management + Defender for Office 365
KQL Query from file: Detecting Phishing Emails with Cloudflare R2 URLs
KQL Query from file: DocuShield - NRT Anti-Impersonation Email Purge
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 05052025
KQL Query from file: Phishing campaigns leveraging Microsoft Forms
KQL Query from file: Brands Impersonation Phishing Trend
KQL Query from file: OAuth App for BEC & Phishing Detection
KQL Query from file: KQL URL Protection Report
KQL Query from file: Discord Invite Hijacking Detection
KQL Query from file: AppSheet.com abused to send Phish
KQL Query from file: MDO Email Threat Classification By ISP
KQL Query
KQL Query
KQL Query from file: MDO Email Threat Classification By Country
KQL Query from file: Threat Hunting Microsoft Sway Quishing
KQL Query
KQL Query from file: Defending against dot zip domain phishing attack
KQL Query from file: Threat Hunting Mshta with Sentinel TI
KQL Query
KQL Query
Page 72 of 78