Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
8,410 detections
Filters
Last updated
All Time
Detection languages
3,122
2,732
773
499
379
Contributors
1,502
1,474
1,085
844
510
Categories
2,697
1,321
905
813
750
Platforms
5,935
913
886
299
280
Products / Services
1,617
1,401
1,093
454
419
MITRE Techniques
18,128
15,651
12,599
8,410
6,235
CVEs
29
27
16
16
15
IDS Classtypes
97
50
21
14
8
IDS Protocols
98
93
9
1
KQL Query from file: Detecting High Risk Passkey Users
KQL Query
KQL Query from file: Azure Cloud Security Monitoring
KQL Query from file: CloudApp Privilege OAuth Grant
KQL Query from file: DefenderXDR Advanced Hunting All-In-One IP Search
KQL Query
KQL Query
KQL Query from file: Entra Admin Roles Query
KQL Query from file: M365 Copilot Plugins Inventory Analysis
KQL Query from file: Entra ID Administrative Role (AD-Sync)
KQL Query from file: Threat Hunting BYOVD Scenarios
KQL Query
KQL Query from file: Azure cloud account takeover
KQL Query
KQL Query from file: Entra QR Code Sign-In KQL Detection
KQL Query from file: Check for Entra Legacy TLS Login
KQL Query
KQL Query
KQL Query from file: Azure AI Security Finding Report
KQL Query
KQL Query from file: Detecting BYOVDLL Abuse
Page 294 of 401