Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
8,410 detections
Filters
Last updated
All Time
Detection languages
3,122
2,732
773
499
379
Contributors
1,502
1,474
1,085
844
510
Categories
2,697
1,321
905
813
750
Platforms
5,935
913
886
299
280
Products / Services
1,617
1,401
1,093
454
419
MITRE Techniques
18,128
15,651
12,599
8,410
6,235
CVEs
29
27
16
16
15
IDS Classtypes
97
50
21
14
8
IDS Protocols
98
93
9
1
KQL Query from file: DISCOVERY: Obsolete device connecting to Entra
KQL Query
KQL Query
KQL Query from file: Tracking The Most Dangerous Entra Admin Role
KQL Query
KQL Query
KQL Query from file: Sentinel Alerts & MITRE ATT&CK Analysis
KQL Query from file: Entra Risk Events & MITRE ATT&CK Analysis
KQL Query
KQL Query from file: Phishing campaigns leveraging Microsoft Forms
KQL Query
KQL Query
KQL Query from file: Perimeter Defense - Attack Surface Reduction
KQL Query from file: Identity Blast Radius 2
KQL Query
KQL Query from file: CVE-2024-7971 Patch Prioritization
KQL Query from file: Vulnerability Profile: CVE-2024-30040 (Zero-day)
Detects suspicious Windows Error Reporting manager (wermgr.exe) child process
KQL Query from file: Hunting IngressNightmare (CVSS 9.8)
KQL Query from file: DefenderXDR Exposure Management for CVE-2024-3094
KQL Query from file: Detecting Nation State Actors @ Near Realtime
Page 296 of 401