Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
8,410 detections
Filters
Last updated
All Time
Detection languages
3,122
2,732
773
499
379
Contributors
1,502
1,474
1,085
844
510
Categories
2,697
1,321
905
813
750
Platforms
5,935
913
886
299
280
Products / Services
1,617
1,401
1,093
454
419
MITRE Techniques
18,128
15,651
12,599
8,410
6,235
CVEs
29
27
16
16
15
IDS Classtypes
97
50
21
14
8
IDS Protocols
98
93
9
1
KQL Query from file: Fortigate Belsen Leak KQL Check
KQL Query
KQL Query from file: Critical Identities OAuth Grant
KQL Query
KQL Query from file: Potential Notepad++ CVE-2025-49144 Exploitation
KQL Query
KQL Query from file: Global Admin Entra Cookie with Chrome ZeroDay
KQL Query from file: Conditional Access Report
KQL Query from file: BadSuccessor Detection
KQL Query from file: Remote code execution exploit chain in OpenVPN
KQL Query from file: Hunting malicious oauth grant by phished user
KQL Query
KQL Query
KQL Query from file: Monitor Azure API Secrets Extraction
KQL Query from file: Azure CLI Spray - ASN 53667
KQL Query
KQL Query
KQL Query from file: MailItemsAccessed Defense
KQL Query from file: Detecting GOLDEN SAML Attack
KQL Query from file: Entra Passkey Addition Threat Detection
KQL Query from file: Detecting Windows Side-Loading DLL attacks
Page 293 of 401