Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
4,916 detections
Filters
Last updated
All Time
Detection languages
2,236
1,064
466
410
326
Contributors
725
665
535
485
271
Categories
1,085
870
805
765
576
Platforms
1,843
1,022
856
814
656
Products / Services
988
596
477
456
383
MITRE Techniques
18,115
15,635
12,577
8,388
6,220
4,916
CVEs
37
17
17
15
12
IDS Classtypes
196
73
47
29
16
IDS Protocols
301
27
24
22
6
KQL Query from file: Detecting Palo Alto Firewall Exploits
This query visualises total emails with Spam detections over time by various Spam Detection technologies/controls.
KQL Query from file: Critical Identities OAuth Grant
KQL Query
KQL Query
KQL Query
KQL Query from file: Global Admin Entra Cookie with Chrome ZeroDay
KQL Query from file: Conditional Access Report
KQL Query from file: BadSuccessor Detection
KQL Query from file: The Hunt for Blob Phishing Mail Domain
KQL Query from file: Hunting malicious oauth grant by phished user
This query visualises emails with Spam detections (High confidence) summarizing the data by Delivery Location.
KQL Query from file: Social Engineering Attack Detection
KQL Query from file: Hunting Rockstar 2FA
KQL Query
KQL Query from file: Monitor Azure API Secrets Extraction
KQL Query from file: Azure CLI Spray - ASN 53667
KQL Query
KQL Query from file: Threat hunting voice phishing for Teams
KQL Query from file: Detecting Commvault Exploitation in Azure
KQL Query from file: MailItemsAccessed Defense
Page 175 of 235