Workspace access
Sign in
You will be taken to Detection catalogue once you are signed in.
Workspace access
You will be taken to Detection catalogue once you are signed in.
Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice
11,125 rules · 4 sources
Every rule, and where it came from.
The public catalogue of detection rules, with the provenance and the ATT&CK context of every entry.
Installation of Custom Shim Databases