Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,304 detections
Filters
Last updated
All Time
Detection languages
676
264
155
72
49
Contributors
232
195
187
166
110
Categories
344
308
229
217
143
Platforms
472
418
224
173
138
Products / Services
264
262
195
176
104
MITRE Techniques
18,113
15,640
12,591
8,389
6,208
1,304
CVEs
5
4
3
3
3
IDS Classtypes
103
67
24
23
12
IDS Protocols
167
51
16
14
7
KQL Query from file: Sneaky 2FA MDO Detection
KQL Query from file: Detecting Mamba 2FA phishing-as-a-service
KQL Query
KQL Query
KQL Query
KQL Query from file: Entra QR Code Sign-In KQL Detection
KQL Query
KQL Query from file: Threat Hunting - MDE Network Intrusion Discovery
KQL Query from file: Detecting EXO MS Graph Enumeration Attacks
KQL Query
KQL Query from file: Detect Power Pwn (aka LOLCopilot) Red Team Tool
KQL Query from file: Critical Monitor for Critical Assets
KQL Query
KQL Query from file: Exposure Management + Defender for Office 365
KQL Query from file: Detecting Phishing Emails with Cloudflare R2 URLs
KQL Query
KQL Query
KQL Query
KQL Query from file: Tracking The Most Dangerous Entra Admin Role
KQL Query from file: Phishing campaigns leveraging Microsoft Forms
KQL Query from file: Brands Impersonation Phishing Trend
Page 50 of 63