Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
yara PassCV_Sabre_Malware_2 — —
yara PassCV_Sabre_Malware_Excalibur_1 — —
yara PassCV_Sabre_Malware_3 — —
yara PassCV_Sabre_Malware_4 — —
yara PassCV_Sabre_Tool_NTScan — —
yara PassCV_Sabre_Malware_5 — —
yara APT_Win_Pipcreat — —
yara Trojan_Win32_PlaSrv — —
yara Trojan_Win32_Platual — —
yara Trojan_Win32_Plaplex — —
yara Trojan_Win32_Dipsind_B — —
yara Trojan_Win32_PlaKeylog_B — —
yara Trojan_Win32_Adupib — —
yara Trojan_Win32_PlaLsaLog — —
yara Trojan_Win32_Plagon — —
yara Trojan_Win32_Plakelog — —
yara Trojan_Win32_Plainst — —
yara Trojan_Win32_Plagicom — —
yara Trojan_Win32_Plaklog — —
yara Trojan_Win32_Plapiio — —
yara Trojan_Win32_Plabit — —
yara Trojan_Win32_Placisc2 — —
yara Trojan_Win32_Placisc3 — —
yara Trojan_Win32_Placisc4 — —
yara Trojan_Win32_Plakpers — —
yara Trojan_Win32_Plainst2 — —
yara Trojan_Win32_Plakpeer — —
yara PoseidonGroup_Malware — —
yara PoseidonGroup_MalDoc_1 — —
yara malware_red_leaves_memory — —
yara PoseidonGroup_MalDoc_2 — —
yara PrikormkaDropper — —
yara PrikormkaModule — —
yara PrikormkaEarlyVersion — —
yara Prikormka — —
yara APT_Malware_PutterPanda_Rel — —
yara APT_Malware_PutterPanda_Rel_2 — —
yara APT_Malware_PutterPanda_PSAPI — —
yara APT_Malware_PutterPanda_WUAUCLT — —
yara APT_Malware_PutterPanda_Gen1 — —