Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
213 detections
Filters
Last updated
All Time
Detection languages
160
16
13
6
5
Contributors
37
34
31
28
25
Categories
166
59
39
36
23
Platforms
128
34
29
27
25
Products / Services
146
23
21
17
17
MITRE Techniques
18,110
15,627
12,575
8,387
6,212
IDS Classtypes
6
IDS Protocols
4
2
KQL Query
KQL Query from file: Detect Power Pwn (aka LOLCopilot) Red Team Tool
KQL Query from file: Exposure Management + Defender for Office 365
KQL Query from file: Detecting Phishing Emails with Cloudflare R2 URLs
KQL Query from file: Phishing campaigns leveraging Microsoft Forms
KQL Query from file: Brands Impersonation Phishing Trend
KQL Query from file: OAuth App for BEC & Phishing Detection
KQL Query
KQL Query from file: KQL URL Protection Report
KQL Query from file: MDO Email Threat Classification By ISP
KQL Query from file: MDO Email Threat Classification By Country
KQL Query
KQL Query from file: Enhanced Cloudflare Phishing Email Detections
KQL Query
KQL Query from file: Hunt for High Volume Phish ISP
KQL Query from file: Blob URIs creation trend analysis
KQL Query
This query visualises total emails with Phish (BEC) Spoof detections by Detection Technology
This query visualises total emails with Phish-Spoof-internal domain detections summarizing the data by the top 10 email sender P2 domain (SenderFromDomain) and sender P1 domain (SenderMailFromDomain).
This query visualises user submissions where admin also performed 'mark and notify' action on the submission
Page 9 of 11