Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
3,864 detections
Filters
Last updated
All Time
Detection languages
2,523
525
299
218
131
Contributors
999
706
554
263
188
Categories
1,448
1,199
1,091
792
575
Platforms
39,931
7,261
6,535
3,864
3,642
Products / Services
1,755
1,449
1,120
438
406
MITRE Techniques
1,888
1,391
913
814
726
CVEs
12
5
4
3
2
IDS Classtypes
10
7
6
6
5
IDS Protocols
37
2
1
KQL Query
KQL Query from file: Detecting FIDO2 Passkey Abuse
KQL Query
KQL Query
KQL Query from file: Critical Identities OAuth Grant
KQL Query
KQL Query
KQL Query from file: Exploring M365 Accounts Investigation
KQL Query
KQL Query
KQL Query from file: Global Admin Entra Cookie with Chrome ZeroDay
KQL Query from file: Conditional Access Report
KQL Query from file: Hunting malicious oauth grant by phished user
KQL Query from file: EntraFalcon Detection
KQL Query from file: Hunting Rockstar 2FA
KQL Query
KQL Query from file: Azure Storage Blob - Misconfiguration Check
KQL Query from file: Monitor Azure API Secrets Extraction
KQL Query
KQL Query from file: Azure CLI Spray - ASN 53667
KQL Query from file: Detecting Commvault Exploitation in Azure
Page 157 of 184