Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

4,916 detections

KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
4052
KQL Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
5051
KQL Query from file: AppSheet.com abused to send Phish
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
5051
KQL Query from file: MDO Email Threat Classification By ISP
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
2051
KQL Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
3051
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 12052025
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
4051
KQL Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
4050
KQL Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
4049
KQL Query from file: MDO Email Threat Classification By Country
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
5049
This query visualises total emails with Spam detections over time summarizing the data daily by Delivery Location.
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0029
KQL Query from file: Threat Hunting Microsoft Sway Quishing
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
3048
KQL Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
3048
KQL Query from file: Defending against dot zip domain phishing attack
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
5048
KQL Query from file: Detect Copilot Plugin Installation
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
4047
KQL Query from file: Threat Hunting Mshta with Sentinel TI
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
3046
KQL Query from file: Golden Chickens TerraStealerV2 Malware Detection
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
4045
KQL Query from file: CVE-2024-38063 CVSS 9.8 Prioritization
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
2045
KQL Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
6043
KQL Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
4043
KQL Query from file: Identity Blast Radius
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
4042
KQL Query
avatar
Steven Lim@KQLWizard
avatar
SlimKQL
1 year ago
3042
Page 180 of 235