Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
4,916 detections
Filters
Last updated
All Time
Detection languages
2,236
1,064
466
410
326
Contributors
725
665
535
485
271
Categories
1,085
870
805
765
576
Platforms
1,843
1,022
856
814
656
Products / Services
988
596
477
456
383
MITRE Techniques
18,115
15,635
12,582
8,393
6,221
4,916
CVEs
37
17
17
15
12
IDS Classtypes
196
73
47
29
16
IDS Protocols
301
27
24
22
6
KQL Query
KQL Query
KQL Query from file: OAuth app using the OD file picker permission
KQL Query
This query visualises top 10 users targeted with Spam.
KQL Query
KQL Query from file: Detecting BYOVDLL Abuse
KQL Query from file: Threat Hunting - MDE Network Intrusion Discovery
KQL Query from file: Sentinel All-In-One UPN ThreatHunt
KQL Query
KQL Query
KQL Query from file: New Threat Actor Group Signature
KQL Query
KQL Query
KQL Query from file: Email Campaign - Exploiting SVG Files and trycloudflare.com to Spread Malware
KQL Query
KQL Query from file: Hunting New Variant of Snake Keylogger
KQL Query from file: Detect Power Pwn (aka LOLCopilot) Red Team Tool
KQL Query from file: Threat Hunting Nation State Actors
KQL Query
KQL Query from file: Critical Monitor for Critical Assets
Page 177 of 235