Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
3,120 detections
Filters
Last updated
All Time
Detection languages
1,062
794
474
242
137
Contributors
463
427
399
318
291
Categories
926
771
637
574
311
Platforms
2,112
365
217
214
142
Products / Services
487
482
389
167
150
MITRE Techniques
18,116
15,638
12,585
8,395
6,225
3,120
CVEs
12
12
8
8
5
IDS Classtypes
62
26
22
11
7
IDS Protocols
47
37
15
8
7
KQL Query
KQL Query from file: Critical Identities OAuth Grant
KQL Query
Detects the execution of DragonForce ransomware binary or its associated event log clearing batch script, as observed in attacks leveraging SimpleHelp vulnerabilities.
KQL Query from file: Social Engineering Attack Detection
KQL Query
KQL Query from file: CVE-2025-33073 Detection
KQL Query from file: External Attack Surface Monitoring KQL
KQL Query from file: AWS NoSuchBucket Check
KQL Query from file: CloudApp Privilege OAuth Grant
KQL Query
KQL Query
KQL Query from file: Azure AI Security Finding Report
KQL Query
KQL Query
KQL Query
KQL Query from file: Hunting Rogue Endpoints via SMB Detection
KQL Query from file: CVE-2024-3393 DDOS Detection
KQL Query from file: Exposure Management - Slim's Metric (MaxCVSS-DAW)
KQL Query
KQL Query
Page 101 of 149