Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
2,588 detections
Filters
Last updated
All Time
Detection languages
1,194
459
310
204
161
Contributors
487
455
323
171
123
Categories
1,884
937
415
400
360
Platforms
1,349
560
343
329
257
Products / Services
601
314
306
286
271
MITRE Techniques
18,116
15,636
12,583
8,393
6,223
2,588
CVEs
9
5
5
5
2
IDS Classtypes
142
96
49
11
6
IDS Protocols
177
49
44
17
4
KQL Query
KQL Query from file: MS Teams DLP Playbook
KQL Query from file: The Hunt for Top 10 Self Hosted AI
KQL Query from file: Hunting New Variant of Snake Keylogger
KQL Query from file: Detect Power Pwn (aka LOLCopilot) Red Team Tool
KQL Query from file: Technique profile eDiscovery misuse detection
KQL Query from file: Ottercookie Detection
KQL Query from file: Malware C2 Comms over Azure Blob Metadata
KQL Query from file: Check for Azure Outdated Security Protocols
Detects initial execution patterns and stealer activities used by KimJongRAT PE and PowerShell variants, including LNK/HTA execution, certutil decoding, rundll32 execution, and PowerShell-based data collection.
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 05052025
KQL Query
KQL Query
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 10032025
KQL Query from file: Defending against dot zip domain phishing attack
KQL Query
KQL Query from file: Golden Chickens TerraStealerV2 Malware Detection
KQL Query
KQL Query from file: Blob URI Unique Domain Count
KQL Query
Page 102 of 124