Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
3,141 detections
Filters
Last updated
All Time
Detection languages
2,292
246
196
179
104
Contributors
738
670
569
284
148
Categories
1,163
747
693
623
440
Platforms
39,931
7,261
6,535
3,864
3,642
3,141
Products / Services
2,849
742
268
187
182
MITRE Techniques
871
856
778
768
738
CVEs
13
5
2
1
1
IDS Classtypes
3
2
2
2
1
IDS Protocols
9
1
1
KQL Query from file: Critical Identities OAuth Grant
KQL Query
KQL Query from file: Exploring M365 Accounts Investigation
KQL Query
KQL Query from file: The Hunt for Blob Phishing Mail Domain
KQL Query from file: Hunting malicious oauth grant by phished user
This query visualises emails with Spam detections (High confidence) summarizing the data by Delivery Location.
KQL Query from file: Social Engineering Attack Detection
KQL Query from file: Hunting Rockstar 2FA
KQL Query
KQL Query
KQL Query from file: Threat hunting voice phishing for Teams
KQL Query from file: MailItemsAccessed Defense
This query visualises total emails with Spam detections over time summarizing the data daily
KQL Query from file: CloudApp Privilege OAuth Grant
KQL Query from file: DefenderXDR Advanced Hunting All-In-One IP Search
KQL Query from file: MDO - Enhancing Email Security with NRD Filtering
KQL Query from file: Advanced Vishing KQL Detection
KQL Query from file: M365 Copilot Gone Rouge
KQL Query from file: Entra Admin Roles Query
KQL Query from file: M365 Copilot Plugins Inventory Analysis
Page 125 of 150