Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
yara kiwi_tools_gentil_kiwi — —
yara KiwiTaskmgr_2 — —
yara kappfree_2 — —
yara x_way2_5_sqlcmd — —
yara Win32_klock — —
yara ipsearcher — —
yara ms10048_x64 — —
yara hscangui — —
yara GoodToolset_ms11080 — —
yara epathobj_exp64 — —
yara kelloworld_2 — —
yara HScan_v1_20_hscan — —
yara _Project1_Generate_rejoice — —
yara _hscan_hscan_hscangui — —
yara kiwi_tools — —
yara HKTL_NET_GUID_OffensiveCSharp — —
yara HKTL_NET_GUID_SHAPESHIFTER — —
yara HKTL_NET_GUID_Evasor — —
yara HKTL_NET_GUID_Stracciatella — —
yara HKTL_NET_GUID_logger — —
yara HKTL_NET_GUID_Internal_Monologue — —
yara HKTL_NET_GUID_GRAT2 — —
yara HKTL_NET_GUID_PowerShdll — —
yara HKTL_NET_GUID_CsharpAmsiBypass — —
yara HKTL_NET_GUID_HastySeries — —
yara HKTL_NET_GUID_DreamProtectorFree — —
yara HKTL_NET_GUID_RedSharp — —
yara HKTL_NET_GUID_ESC — —
yara HKTL_NET_GUID_Csharp_Loader — —
yara HKTL_NET_GUID_bantam — —
yara HKTL_NET_GUID_SharpTask — —
yara HKTL_NET_GUID_WindowsPlague — —
yara HKTL_NET_GUID_Misc_CSharp — —
yara HKTL_NET_GUID_SharpSpray — —
yara HKTL_NET_GUID_Obfuscator — —
yara HKTL_NET_GUID_SafetyKatz — —
yara HKTL_NET_GUID_Dropless_Malware — —
yara HKTL_NET_GUID_UAC_SilentClean — —
yara HKTL_NET_GUID_DesktopGrabber — —
yara HKTL_NET_GUID_wsManager — —