Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
yara Trojan_Win32_Adupib — —
yara Trojan_Win32_PlaLsaLog — —
yara Trojan_Win32_Plagon — —
yara Trojan_Win32_Plakelog — —
yara Trojan_Win32_Plainst — —
yara Trojan_Win32_Plagicom — —
yara Trojan_Win32_Plaklog — —
yara Trojan_Win32_Plapiio — —
yara Trojan_Win32_Plabit — —
yara Trojan_Win32_Placisc2 — —
yara Trojan_Win32_Placisc3 — —
yara Trojan_Win32_Placisc4 — —
yara Trojan_Win32_Plakpers — —
yara Trojan_Win32_Plainst2 — —
yara Trojan_Win32_Plakpeer — —
yara PoseidonGroup_Malware — —
yara PoseidonGroup_MalDoc_1 — —
yara malware_red_leaves_memory — —
yara PoseidonGroup_MalDoc_2 — —
yara PrikormkaDropper — —
yara PrikormkaModule — —
yara PrikormkaEarlyVersion — —
yara Prikormka — —
yara APT_Malware_PutterPanda_Rel — —
yara APT_Malware_PutterPanda_Rel_2 — —
yara APT_Malware_PutterPanda_PSAPI — —
yara APT_Malware_PutterPanda_WUAUCLT — —
yara APT_Malware_PutterPanda_Gen1 — —
yara Malware_MsUpdater_String_in_EXE — —
yara RUAG_Tavdig_Malformed_Executable — —
yara APT_Malware_PutterPanda_MsUpdater_3 — —
yara APT_Malware_PutterPanda_MsUpdater_1 — —
yara APT_Malware_PutterPanda_MsUpdater_2 — —
yara APT_Malware_PutterPanda_Gen4 — —
yara malware_red_leaves_generic — —
yara Sofacy_Fysbis_ELF_Backdoor_Gen2 — —
yara Sofacy_Jun16_Sample1 — —
yara Sofacy_Jun16_Sample2 — —
yara Sofacy_Jun16_Sample3 — —
yara Sphinx_Moth_cudacrt — —