Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1,224 detections
Filters
Last updated
All Time
Detection languages
1,117
30
19
17
15
Contributors
391
236
131
85
62
Categories
313
252
228
185
166
Platforms
651
437
269
228
200
Products / Services
10,680
9,761
6,694
4,418
3,744
1,224
MITRE Techniques
265
260
234
217
209
CVEs
8
8
6
6
6
IDS Classtypes
2
2
1
1
1
IDS Protocols
2
1
KQL Query
KQL Query
KQL Query
KQL Query from file: RMM Hunting with Sentinel TI
KQL Query from file: Sentinel All-In-One UPN ThreatHunt
KQL Query
KQL Query from file: New Threat Actor Group Signature
KQL Query
KQL Query from file: Detect Power Pwn (aka LOLCopilot) Red Team Tool
KQL Query
KQL Query from file: Critical Monitor for Critical Assets
KQL Query from file: ATP Detection for Critical Identities
KQL Query from file: T1555.003 - Credentials from Web Browsers
KQL Query from file: Threat Intelligence Data from Sentinel UEBA2
KQL Query
KQL Query
KQL Query from file: Sentinel Alerts & MITRE ATT&CK Analysis
KQL Query from file: Entra Risk Events & MITRE ATT&CK Analysis
KQL Query
KQL Query from file: Identity Blast Radius 2
KQL Query from file: DefenderXDR Exposure Management for CVE-2024-3094
Page 53 of 59