Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
3,864 detections
Filters
Last updated
All Time
Detection languages
2,523
525
299
218
131
Contributors
999
706
554
263
188
Categories
1,448
1,199
1,091
792
575
Platforms
39,931
7,261
6,535
3,864
3,642
Products / Services
1,755
1,449
1,120
438
406
MITRE Techniques
1,888
1,391
913
814
726
CVEs
12
5
4
3
2
IDS Classtypes
10
7
6
6
5
IDS Protocols
37
2
1
KQL Query from file: Multi-Cloud DefenderXDR KQL Threat Detection
KQL Query
KQL Query from file: Azure AI Security Finding Report
KQL Query
KQL Query from file: RMM Hunting with Sentinel TI
KQL Query from file: Sentinel All-In-One UPN ThreatHunt
KQL Query
KQL Query
KQL Query from file: New Threat Actor Group Signature
KQL Query
KQL Query
KQL Query from file: Mitigating security risks in MCP implementations
KQL Query
KQL Query from file: Detect Power Pwn (aka LOLCopilot) Red Team Tool
KQL Query from file: Threat Hunting Nation State Actors
KQL Query
KQL Query from file: Critical Monitor for Critical Assets
KQL Query from file: Technique profile eDiscovery misuse detection
KQL Query from file: ATP Detection for Critical Identities
KQL Query from file: Exposure Management + Defender for Office 365
KQL Query from file: Malware C2 Comms over Azure Blob Metadata
Page 159 of 184