Detection catalogue
Explore published rules with transparent provenance, licensing, and ATT&CK mappings.
- detections
Loading detections…
Loading detections
Explore published rules with transparent provenance, licensing, and ATT&CK mappings.
Loading detections…
Detects an appx package that was added to the pipeline of the "to be processed" packages that is located in uncommon locations.
This detection is not mapped to any ATT&CK technique.
Published to signed-in readers
The query as its source wrote it, its canonical form, and the content hash that pins this exact revision.