Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_CLIENT Generic Mailer Accessed on External Server rev 2 2020-05-01
suricata ET EXPLOIT Possible SaltStack Authentication Bypass CVE-2020-11651 M2 rev 1 2020-05-01
suricata ET WEB_CLIENT Cpanel Cracker Accessed on External Server rev 2 2020-05-01
suricata ET WEB_SERVER Generic Mailer Accessed on Internal Server rev 2 2020-05-01
suricata ET WEB_SERVER Cpanel Cracker Accessed on Internal Server rev 2 2020-05-01
suricata ET WEB_CLIENT Generic Stolen Credentials Accessed on External Server rev 2 2020-05-01
suricata ET MALWARE OSX/Flashback.K/I reporting successful infection 2 rev 5 2020-05-01
suricata ET WEB_CLIENT Generic Webshell Accessed on External Server rev 2 2020-05-01
suricata ET WEB_CLIENT Generic Webshell Accessed on External Server rev 2 2020-05-01
snort ET WEB_SERVER Generic Mailer Accessed on Internal Server rev 2 2020-04-30
snort ET WEB_SERVER Generic Mailer Check Accessed on Internal Server rev 2 2020-04-30
snort ET TROJAN MINEBRIDGE CnC Request rev 2 2020-04-30
snort ET WEB_SERVER Generic Webshell Accessed on Internal Server rev 2 2020-04-30
suricata ET WEB_SERVER Adobe Flash Player Rosetta Flash compressed CWS in URI rev 3 2020-04-30
suricata ET EXPLOIT Supermicro BMC Password Disclosure 4 rev 5 2020-04-30
suricata ET ADWARE_PUP Optimum Installer User-Agent IE6 on Windows XP rev 6 2020-04-30
suricata ET WEB_SPECIFIC_APPS Possible WP Plug-in MailPoet Arbitrary File Upload/Auth Bypass Vulnerability rev 4 2020-04-30
snort ET TROJAN IcedID CnC Domain in SNI rev 2 2020-04-29
snort ET WEB_CLIENT Generic Mailer Accessed on External Server rev 2 2020-04-29
snort ET TROJAN Win32/Kryptik.HCZR Variant Initial Checkin rev 2 2020-04-29
snort ET WEB_CLIENT Generic Mailer Accessed on External Server rev 2 2020-04-29
snort ET WEB_CLIENT Generic Webshell Accessed on External Server rev 2 2020-04-29
snort ET USER_AGENTS BeeMovie Related Activity rev 2 2020-04-29
snort ET TROJAN IcedID CnC Domain in SNI rev 2 2020-04-29
suricata ET MALWARE Virut Family GET rev 7 2020-04-29
suricata ET WEB_SERVER Generic Mailer Check Accessed on Internal Server rev 2 2020-04-29
suricata ET WEB_CLIENT Generic Mailer Accessed on External Server rev 2 2020-04-29
suricata ET WEB_SERVER Generic Mailer Accessed on Internal Server rev 2 2020-04-29
suricata ET WEB_CLIENT Generic Webshell Accessed on External Server rev 2 2020-04-29
suricata ET MALWARE Trojan.Win32.A.FakeAV Reporting rev 6 2020-04-29
suricata ET WEB_CLIENT Microsoft Application Crash Report Indicates Potential VGX Memory Corruption rev 3 2020-04-29
suricata ET WEB_SERVER Generic Mailer Accessed on Internal Server rev 2 2020-04-29
suricata ET WEB_SERVER Generic Webshell Accessed on Internal Server rev 2 2020-04-29
suricata ET WEB_CLIENT Generic Mailer Accessed on External Server rev 2 2020-04-29
suricata ET WEB_CLIENT Microsoft Application Crash Report Indicates Potential VGX Memory Corruption 2 rev 3 2020-04-29
suricata ET SCAN IBM NSA User Agent rev 10 2020-04-29
snort ET TROJAN BAZAR CnC Domain in DNS Lookup rev 2 2020-04-28
snort ET TROJAN BAZAR CnC Domain in DNS Lookup rev 2 2020-04-28
snort ET TROJAN AntSword Webshell User-Agent Observed rev 2 2020-04-28
snort ET TROJAN BAZAR CnC Domain in DNS Lookup rev 2 2020-04-28