Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
yara EQGRP_Implants_Gen2 — —
yara EQGRP_sploit — —
yara EQGRP_BLIAR_BLIQUER — —
yara apt_equation_exploitlib_mutexes — —
yara EQGRP_Implants_Gen3 — —
yara EQGRP_Implants_Gen4 — —
yara EQGRP_BananaUsurper_writeJetPlow — —
yara EQGRP_pandarock — —
yara EQGRP_Implants_Gen5 — —
yara EQGRP_Implants_Gen6 — —
yara EQGRP_BARPUNCH_BPICKER — —
yara EQGRP_BBALL — —
yara EQGRP_hexdump — —
yara EQGRP_StoreFc — —
yara EQGRP_BpfCreator_RHEL4 — —
yara msvcrt_Win7x86 — —
yara EQGRP_BFLEA_2201 — —
yara EQGRP_create_http_injection — —
yara EQGRP_BICECREAM — —
yara EQGRP_uninstallPBD — —
yara EQGRP_sploit_py — —
yara EQGRP_extrabacon — —
yara EQGRP_BPATROL_2201 — —
yara EQGRP_BBANJO — —
yara EQGRP_jetplow_SH — —
yara EQGRP_BPIE — —
yara EQGRP_EPBA — —
yara EQGRP_shellcode — —
yara EQGRP_tinyhttp_setup — —
yara EQGRP_workit — —
yara EQGRP_BUSURPER_3001_724 — —
yara EQGRP_BBALL_M50FW08_2201 — —
yara EQGRP_userscript — —
yara EQGRP_config_jp1_UA — —
yara EQGRP_SecondDate_2211 — —
yara EQGRP_bo — —
yara EQGRP_BananaAid — —
yara EQGRP_sniffer_xml2pcap — —
yara EQGRP_epicbanana_2_1_0_1 — —
yara EQGRP_networkProfiler_orderScans — —