Leaderboard
Month of: November
Updated daily. Last refreshed November 8, 2026 at 1:46 PM UTC.
November Leaderboard
Description
We're continuing in November with an engagement leaderboard. The more community members engage with your content, the higher you'll rank!
Rewards
🎟️ The top 3 contributors in November will receive: - First Place: $200 gift card - Second Place: $100 gift card - Third Place: $50 gift card 🎁 Contributors placing 4th - 10th will receive custom contributor-only detections.ai swag! NOTE: We have systems in place that deactivate accounts for activity intended to inflate leaderboard standings. The leaderboard is here to show whose detections other engineers are actually using.
Top 10
Most liked by You
@KQLWizard
Detection:
High-Fidelity php2shell KQL Detection
@KQLWizard
Detection:
Threat Hunting KQL – PHP RCE (CVE-2026-109618 & CVE-2026-109619)
@KQLWizard
Detection:
Defending against ARTEX and CyberStrikeAI
@KQLWizard
Detection:
PHP2Shell ThreatLock
@Sergio_Albea
Detection:
[VL] - PHP2Shell: List Devices affected (PHP + Version + InternetFacing) by Critical PHP Vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
@Aamir
Detection:
PHP Code Execution and Post-Exploitation on Internet-Facing Hosts (php2shell) - CVE-2026-109618 , CVE-2026-109619
@daniyyell
Detection:
Potential PHP2Shell Exploitation via Suspicious Web Server Child Processes
@KQLWizard
Detection:
Detecting the Node.js Brotli RCE
@Sergio_Albea
Detection:
[VL] - PHP2Shell: Review PHP Versions selected in our Applications
@Fozz23
Detection:
Inventory PHP Version Detection - (CVE-2026-109618 / CVE-2026-109619)
@LemonKQL
Detection:
PHP2Shell CVE-2026-109618/109619 PHP installed and active exposure
@gokselatakan
Detection:
PHP Versions Below the Fixes for CVE-2026-109618 and CVE-2026-109619 (PHP2Shell)
Come build with us
Join the community that moves faster than the threat.
Running a detection team? See Enterprise →