Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_CLIENT Fake AV Phone Scam Landing June 11 2015 M1 rev 5 2020-09-01
suricata ET INFO Suspicious HTTP POST to 404.php rev 2 2020-09-01
suricata ET WEB_CLIENT Possible Fake AV Phone Scam Long Domain Mar 30 M2 rev 6 2020-09-01
suricata ET WEB_CLIENT Fake Adobe Flash Player malware binary requested rev 5 2020-09-01
suricata ET WEB_CLIENT Fake AV Phone Scam Landing June 26 2015 M5 rev 4 2020-09-01
suricata ET EXPLOIT Secutech Router DNS Changer Exploit Attempt rev 2 2020-09-01
suricata ET WEB_SERVER WebShell Generic - *.tar.gz in POST body rev 4 2020-09-01
suricata ET WEB_CLIENT Fake Windows Security Warning - png rev 4 2020-09-01
suricata ET WEB_CLIENT Microsoft Tech Support Phone Scam M1 Jul 07 2017 rev 4 2020-09-01
suricata ET WEB_CLIENT Apple Tech Support Phone Scam Jul 07 2017 rev 4 2020-09-01
suricata ET PHISHING 16Shop Phishing Kit Accessed on External Compromised Server rev 3 2020-09-01
suricata ET WEB_SPECIFIC_APPS WordPress SQL Injection Attempt -- admin-ajax.php cookie SELECT rev 9 2020-09-01
suricata ET WEB_CLIENT Microsoft Tech Support Phone Scam M4 Jul 07 2017 rev 4 2020-09-01
suricata ET MOBILE_MALWARE Apple iPhone Implant - Boundary Observed rev 2 2020-09-01
suricata ET INFO McAfee AV Download - Set rev 2 2020-09-01
suricata ET WEB_CLIENT DRIVEBY FakeSupport - URI - windows-firewall.png rev 4 2020-09-01
suricata ET MALWARE Aurora Ransomware CnC Checkin rev 4 2020-09-01
suricata ET PHISHING DNS Query to Generic 107 Phishing Domain rev 4 2020-09-01
suricata ET WEB_CLIENT Fake AV Phone Scam Domain M3 Mar 3 rev 5 2020-09-01
sigma Python SQL Exceptions stable 2020-09-01
sigma Ruby on Rails Framework Exceptions stable 2020-09-01
sigma Django Framework Exceptions stable 2020-09-01
sigma Spring Framework Exceptions stable 2020-09-01
snort ET CURRENT_EVENTS Generic Phishing Panel Accessed on Internal Server rev 2 2020-08-31
snort ET CURRENT_EVENTS Generic Phishing Panel Accessed on External Server rev 2 2020-08-31
snort ET CURRENT_EVENTS Caixa Phishing Landing rev 2 2020-08-31
snort ET TROJAN Upatre User-Agent rev 2 2020-08-31
suricata ET ADWARE_PUP AdVantage Malware URL Infection Report rev 5 2020-08-31
suricata ET ADWARE_PUP LoadMoney Checkin 5 rev 5 2020-08-31
suricata ET ADWARE_PUP host-domain-lookup.com spyware related Start Report rev 8 2020-08-31
suricata ET ADWARE_PUP Win32.EZula Adware Reporting Successful Install rev 5 2020-08-31
suricata ET PHISHING Cloned Impots Gouv FR Page - Possible Phishing Landing rev 2 2020-08-31
suricata ET PHISHING Cloned Ziggo NL Page - Possible Phishing Landing rev 2 2020-08-31
suricata ET ADWARE_PUP MyGlobalSearch Spyware bar update rev 8 2020-08-31
suricata ET PHISHING Cloned Telekom / Tmobile Page - Possible Phishing Landing rev 2 2020-08-31
suricata ET ADWARE_PUP Adaware.BarACE Checkin and Update rev 7 2020-08-31
suricata ET PHISHING Caixa Phishing Landing rev 2 2020-08-31
suricata ET PHISHING Cloned Discover Page - Possible Phishing Landing rev 2 2020-08-31
suricata ET ADWARE_PUP W32/InstallRex.Adware Initial CnC Beacon rev 4 2020-08-31
suricata ET MALWARE Win32/Vools Variant CnC Checkin rev 2 2020-08-31