Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
4,917 detections
Filters
Last updated
All Time
Detection languages
2,237
1,064
466
410
326
Contributors
725
665
535
485
271
Categories
1,085
870
806
765
576
Platforms
1,843
1,022
856
814
657
Products / Services
988
596
477
456
383
MITRE Techniques
18,115
15,636
12,582
8,393
6,221
4,917
CVEs
37
17
17
15
12
IDS Classtypes
196
73
47
29
16
IDS Protocols
301
27
24
22
6
KQL Query
KQL Query from file: Microsoft Entra Identity Attack Threat Detection
KQL Query
KQL Query
This query visualises top 15 users targeted with Spam with summarized spam detections.
KQL Query from file: The Hunt for QR Phisher
KQL Query from file: Sentinel UEBA Privilege Escalation Detection
This query visualises total inbound emails with Spam detections summarizing the data by the top 15 email sender P2 domain (SenderFromDomain).
KQL Query from file: Data Exfiltration via Microsoft Teams
KQL Query from file: NEW Real-time Anomalous Token Detection
KQL Query from file: Malicious FIDO2 Registration Threat Detection
KQL Query from file: Entra User Account Compromised by C2
This query visualises emails with Spam detections (Normal confidence) summarizing the data by Delivery Location.
KQL Query from file: Attacker in the Middle Precision Detection
KQL Query
KQL Query from file: Detect Privilege Admin under AiTM attack
KQL Query
KQL Query from file: Threat Intelligence Data from Sentinel UEBA
KQL Query from file: Nation State Actors via Microsoft Graph
KQL Query
KQL Query
Page 174 of 235