Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
4,916 detections
Filters
Last updated
All Time
Detection languages
2,236
1,064
466
410
326
Contributors
725
665
535
485
271
Categories
1,085
870
805
765
576
Platforms
1,843
1,022
856
814
656
Products / Services
988
596
477
456
383
MITRE Techniques
18,115
15,635
12,582
8,393
6,220
4,916
CVEs
37
17
17
15
12
IDS Classtypes
196
73
47
29
16
IDS Protocols
301
27
24
22
6
KQL Query
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 05052025
KQL Query from file: Phishing campaigns leveraging Microsoft Forms
KQL Query from file: Brands Impersonation Phishing Trend
KQL Query
KQL Query from file: Perimeter Defense - Attack Surface Reduction
KQL Query from file: OAuth App for BEC & Phishing Detection
KQL Query from file: Identity Blast Radius 2
KQL Query from file: CVE-2024-7971 Patch Prioritization
KQL Query from file: Vulnerability Profile: CVE-2024-30040 (Zero-day)
KQL Query from file: DefenderXDR Exposure Management for CVE-2024-3094
KQL Query from file: Detecting Nation State Actors @ Near Realtime
This query visualises total inbound emails which has any Bulk complaint level.
KQL Query from file: CVE-2024-26234 and CVE-2024-29988
KQL Query
KQL Query from file: Exposure Management - Slim's Metric (MaxCVSS-DAW)
KQL Query from file: Detecting Copilot Studio Bot Creation
KQL Query from file: CVE-2025-32705 Out-of-bounds Read Detection
KQL Query from file: CVE-2024-3094 with CVSS Score 10
KQL Query from file: KQL URL Protection Report
KQL Query from file: Discord Invite Hijacking Detection
Page 179 of 235