Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,304 detections
Filters
Last updated
All Time
Detection languages
676
264
155
72
49
Contributors
232
195
187
166
110
Categories
344
308
229
217
143
Platforms
472
418
224
173
138
Products / Services
264
262
195
176
104
MITRE Techniques
18,113
15,640
12,591
8,389
6,208
1,304
CVEs
5
4
3
3
3
IDS Classtypes
103
67
24
23
12
IDS Protocols
167
51
16
14
7
KQL Query
KQL Query from file: Perimeter Defense - Attack Surface Reduction
KQL Query from file: OAuth App for BEC & Phishing Detection
KQL Query
KQL Query from file: Internet facing devices vulnerablility report
KQL Query from file: CVE-2024-7971 Patch Prioritization
KQL Query from file: Hunting Zloader DNS Tunneling
KQL Query from file: CVE-2024-26234 and CVE-2024-29988
KQL Query
KQL Query from file: Exposure Management - Slim's Metric (MaxCVSS-DAW)
KQL Query from file: CVE-2024-3094 with CVSS Score 10
KQL Query from file: KQL URL Protection Report
KQL Query from file: Honeypot Threat Intelligence (TI) Data
KQL Query
KQL Query from file: Discord Invite Hijacking Detection
KQL Query from file: MDO Email Threat Classification By ISP
KQL Query from file: MDO Email Threat Classification By Country
KQL Query
KQL Query from file: Threat Hunting Mshta with Sentinel TI
KQL Query
KQL Query
Page 51 of 63