Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
3,141 detections
Filters
Last updated
All Time
Detection languages
2,292
246
196
179
104
Contributors
738
670
569
284
148
Categories
1,163
747
693
623
440
Platforms
39,931
7,261
6,535
3,864
3,642
3,141
Products / Services
2,849
742
268
187
182
MITRE Techniques
871
856
778
768
738
CVEs
13
5
2
1
1
IDS Classtypes
3
2
2
2
1
IDS Protocols
9
1
1
KQL Query from file: KQL URL Protection Report
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan
KQL Query from file: AppSheet.com abused to send Phish
KQL Query from file: MDO Email Threat Classification By ISP
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 12052025
KQL Query from file: DefenderXDR Weekly OSINT Indicators Scan 10032025
KQL Query
KQL Query from file: MDO Email Threat Classification By Country
This query visualises total emails with Spam detections over time summarizing the data daily by Delivery Location.
KQL Query from file: Threat Hunting Microsoft Sway Quishing
KQL Query
KQL Query from file: Defending against dot zip domain phishing attack
KQL Query
KQL Query
KQL Query
KQL Query
KQL Query from file: Detecting Misconfigured EXO Transport Rules
KQL Query
KQL Query from file: CVE-2025-21298 Zero-Click RCE
KQL Query from file: Enhanced Cloudflare Phishing Email Detections
Page 128 of 150