defection.io

Explore thousands of security alerts with threat-informed precision.

—
Detections: SigmaHQ + Splunk ESCU
Parsed, converged, updated: Queries pre-converted for your SIEM
Splunk, Elastic, Sentinel, Loki, & more: Attack to defense, end to end context
MITRE ATT&CK, CAR, D3FEND, Atomic Red Team

Built on open-source Sigma rules from SigmaHQ and Splunk ESCU

© 2026 The MITRE Corporation. ATT&CK® and D3FEND™ data reproduced with permission. SigmaHQ detection rules licensed under DRL 1.1. Splunk ESCU detections © Splunk Inc., licensed under Apache 2.0. attack.mitre.org · d3fend.mitre.org · research.splunk.com · CAR analytics licensed under Apache 2.0 · car.mitre.org

defection.io

A Detection Knowledge Graph

Explore thousands of security alerts with threat-informed precision.

—
Detections: SigmaHQ + Splunk ESCU
Parsed, converged, updated: Queries pre-converted for your SIEM
Splunk, Elastic, Sentinel, Loki, & more: Attack to defense, end to end context
MITRE ATT&CK, CAR, D3FEND, Atomic Red Team

Drag headers to reorder | Drag edges to resize

Loading detections...

Select	Title	Description	Category	Status	Event	OS	Product	MITRE ATT&CK	CVEs	Severity	Author	Created	Updated	ID	Refs

Built on open-source Sigma rules from SigmaHQ and Splunk ESCU

Drag headers to reorder | Drag edges to resize

Loading detections...

Select	Title	Description	Category	Status	Event	OS	Product	MITRE ATT&CK	CVEs	Severity	Author	Created	Updated	ID	Refs