Detection Query Browser

Search, filter, and copy 60+ production-ready detection queries mapped to MITRE ATT&CK

Detection Engineering KQL SPL MITRE ATT&CK Threat Hunting

Showing 60 of 60 detections

🔍

Tactic

Severity

Source

Language

🔎

Try broadening your search or resetting filters.

Nexus SecOps — Detection Query Browser — All queries use synthetic data (RFC 5737 IPs, example.com domains).
Back to Nexus SecOps