Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Common Form POST - Paypal Phishing Landing 2020-06-11 rev 2 2020-06-11
suricata ET PHISHING Common Form POST - Instagram Phishing Landing 2020-06-11 rev 2 2020-06-11
suricata ET PHISHING Common Form POST - Netease Webmail Phishing Landing 2020-06-11 rev 2 2020-06-11
suricata ET PHISHING Common Form POST - Paypal Phishing Landing 2020-06-11 rev 2 2020-06-11
suricata ET PHISHING Common Form POST - Yahoo Phishing Landing 2020-06-11 rev 2 2020-06-11
suricata ET PHISHING Common Form POST - Chase Phishing Landing 2020-06-11 rev 2 2020-06-11
suricata ET PHISHING Common Form POST - Whatsapp/Facebook Phishing Landing 2020-06-11 rev 2 2020-06-11
suricata ET PHISHING Common Form POST - CenturyLink Phishing Landing 2020-06-11 rev 2 2020-06-11
suricata ET PHISHING Common Form POST - Yahoo Phishing Landing 2020-06-11 rev 2 2020-06-11
suricata ET PHISHING Common Form POST - SunTrust Phishing Landing 2020-06-11 rev 2 2020-06-11
suricata ET PHISHING Common Form POST - SunTrust Phishing Landing 2020-06-11 rev 2 2020-06-11
suricata ET PHISHING Common Form POST - Facebook Phishing Landing 2020-06-11 rev 2 2020-06-11
suricata ET PHISHING Common Form POST - Facebook Phishing Landing 2020-06-11 rev 2 2020-06-11
suricata ET PHISHING Common Form POST - Chase Phishing Landing 2020-06-11 rev 2 2020-06-11
suricata ET PHISHING Common Form POST - Instagram Phishing Landing 2020-06-11 rev 2 2020-06-11
suricata ET PHISHING Common Form POST - M&T Bank Phishing Landing 2020-06-11 rev 2 2020-06-11
suricata ET PHISHING Common Form POST - Instagram Phishing Landing 2020-06-11 rev 2 2020-06-11
suricata ET PHISHING Generic T.Goe Phishing Landing rev 2 2020-06-11
suricata ET PHISHING Common Form POST - Chase Phishing Landing 2020-06-11 rev 2 2020-06-11
snort ET EXPLOIT Multiple DLink Routers Remote Code Execution CVE-2019-16920 rev 2 2020-06-10
snort ET TROJAN FRat WebSocket Request M1 rev 2 2020-06-10
snort ET EXPLOIT Fastweb Fastgate 0.00.81 - Remote Code Execution rev 2 2020-06-10
snort ET TROJAN JS/Nemucod requesting EXE payload 2015-12-01 rev 3 2020-06-09
suricata ET MALWARE Linux/MayhemBruter Inbound Ping From CnC rev 3 2020-06-09
suricata ET WEB_SERVER WebShell - ASPyder - Auth Creds rev 7 2020-06-09
suricata ET WEB_CLIENT Possible vBulletin object injection vulnerability Attempt rev 3 2020-06-09
suricata ET SCAN Arachni Scanner Web Scan rev 6 2020-06-09
snort ET EXPLOIT Multiple Router RCE Routersploit rev 2 2020-06-08
snort ET EXPLOIT Technicolor TD5130.2 - Remote Command Execution rev 2 2020-06-08
snort ET EXPLOIT Netgear ReadyNAS Surveillance Unauthenticated Remote Command Execution rev 4 2020-06-08
snort ET MOBILE_MALWARE Android Malvertising Communication rev 2 2020-06-08
snort ET EXPLOIT OpenMRS Deserialization Vulnerability CVE-2018-19276 rev 2 2020-06-08
snort ET EXPLOIT Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution rev 2 2020-06-08
snort ET EXPLOIT Xfinity Gateway - Remote Code Execution rev 2 2020-06-08
suricata ET MOBILE_MALWARE Android Malvertising Communication rev 1 2020-06-08
snort ET TROJAN TA410 APT FlowCloud Dependency Download M4 rev 2 2020-06-05
snort ET TROJAN TA410 APT FlowCloud Dependency Download M1 rev 2 2020-06-05
snort ET TROJAN TA410 APT FlowCloud Dependency Download M3 rev 2 2020-06-05
snort ET TROJAN Win32/Avaddon Ransomware Style External IP Address Check rev 2 2020-06-05
snort ET TROJAN Blaze/Supreme Bot Activity M2 rev 2 2020-06-05