Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
3,141 detections
Filters
Last updated
All Time
Detection languages
2,292
246
196
179
104
Contributors
738
670
569
284
148
Categories
1,163
747
693
623
440
Platforms
39,931
7,261
6,535
3,864
3,642
3,141
Products / Services
2,849
742
268
187
182
MITRE Techniques
871
856
778
768
738
CVEs
13
5
2
1
1
IDS Classtypes
3
2
2
2
1
IDS Protocols
9
1
1
This query visualises total inbound emails with Spam detections.
KQL Query from file: Monitor Copilot Agent for SharePoint
KQL Query
KQL Query
This query visualises top 15 users targeted with Spam with summarized spam detections.
KQL Query from file: The Hunt for QR Phisher
KQL Query from file: Sentinel UEBA Privilege Escalation Detection
This query visualises total inbound emails with Spam detections summarizing the data by the top 15 email sender P2 domain (SenderFromDomain).
KQL Query from file: Data Exfiltration via Microsoft Teams
KQL Query
This query visualises emails with Spam detections (Normal confidence) summarizing the data by Delivery Location.
KQL Query
KQL Query from file: Detect Privilege Admin under AiTM attack
KQL Query
KQL Query from file: Detecting M365 Copilot Shared Agent
KQL Query from file: Nation State Actors via Microsoft Graph
KQL Query
KQL Query from file: Detecting FIDO2 Passkey Abuse
KQL Query from file: Sniffing Out UNC3944 on Teams
KQL Query
This query visualises total emails with Spam detections over time by various Spam Detection technologies/controls.
Page 124 of 150