Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,224 detections
Filters
Last updated
All Time
Detection languages
1,117
30
19
17
15
Contributors
391
236
131
85
62
Categories
313
252
228
185
166
Platforms
651
437
269
228
200
Products / Services
10,680
9,761
6,694
4,418
3,744
1,224
MITRE Techniques
265
260
234
217
209
CVEs
8
8
6
6
6
IDS Classtypes
2
2
1
1
1
IDS Protocols
2
1
KQL Query
KQL Query from file: Sentinel UEBA Privilege Escalation Detection
KQL Query from file: Entra User Account Compromised by C2
KQL Query from file: Attacker in the Middle Precision Detection
KQL Query from file: Detect Privilege Admin under AiTM attack
KQL Query
KQL Query from file: Threat Intelligence Data from Sentinel UEBA
KQL Query from file: Hunting Malicious Copilot Agent
KQL Query from file: Detecting FIDO2 Passkey Abuse
KQL Query
KQL Query
KQL Query
KQL Query
KQL Query from file: Conditional Access Report
KQL Query from file: Hunting malicious oauth grant by phished user
This query visualises emails with Spam detections (High confidence) summarizing the data by Delivery Location.
KQL Query from file: Hunting Rockstar 2FA
KQL Query
KQL Query from file: Hunting fasthttp Bruteforce Campaign
KQL Query
KQL Query from file: Detecting TeamsPhisher attack with Azure Sentinel
Page 52 of 59