Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,304 detections
Filters
Last updated
All Time
Detection languages
676
264
155
72
49
Contributors
232
195
187
166
110
Categories
344
308
229
217
143
Platforms
472
418
224
173
138
Products / Services
264
262
195
176
104
MITRE Techniques
18,113
15,640
12,591
8,389
6,208
1,304
CVEs
5
4
3
3
3
IDS Classtypes
103
67
24
23
12
IDS Protocols
167
51
16
14
7
KQL Query from file: Microsoft Entra Identity Attack Threat Detection
KQL Query
KQL Query from file: The Hunt for QR Phisher
KQL Query from file: Detect Privilege Admin under AiTM attack
KQL Query
KQL Query from file: Threat Intelligence Data from Sentinel UEBA
KQL Query from file: Nation State Actors via Microsoft Graph
KQL Query
KQL Query from file: Detecting FIDO2 Passkey Abuse
KQL Query from file: defendnot detection
KQL Query
KQL Query from file: Remote code execution exploit chain in OpenVPN
KQL Query from file: The Hunt for Blob Phishing Mail Domain
KQL Query from file: Hunting malicious oauth grant by phished user
KQL Query from file: Hunting Rockstar 2FA
KQL Query from file: Threat hunting voice phishing for Teams
KQL Query from file: LDAPNightmare POC Detection
KQL Query from file: CVE-2025-33073 Detection
KQL Query
KQL Query from file: Advanced Vishing KQL Detection
KQL Query from file: Entra Admin Roles Query
Page 49 of 63