Sigma Watch is free and independent.
If it saves you time, keep it running.
☕ Buy me a coffee
Sigma
Watch
Home
Gaps
Rules
Malware
About
API
Donate
Discord
Rule feed
Detection
rules
Every rule tracked across all seven sources, newest updates first.
Source
All sources
sigma
elastic
splunk
yara
sentinel
snort
suricata
Filter
Source
Rule
Status
Updated
yara
php_dns
—
—
yara
php_reverse_shell
—
—
yara
php_shell
—
—
yara
asp_proxy
—
—
yara
settings
—
—
yara
asp_shell
—
—
yara
php_killnc
—
—
yara
asp_file
—
—
yara
crime_ole_loadswf_cve_2018_4878
—
—
yara
aspbackdoor_ipclear
—
—
yara
sig_238_findoor
—
—
yara
ArtTray_zip_Folder_ArtTray
—
—
yara
InstGina
—
—
yara
FPipe2_0
—
—
yara
aspbackdoor_entice
—
—
yara
aspbackdoor_EDIT
—
—
yara
SplitJoin_V1_3_3_rar_Folder_3
—
—
yara
sig_238_Glass2k
—
—
yara
sig_238_nbtdump
—
—
yara
sig_238_RunAsEx
—
—
yara
sqlcheck
—
—
yara
CleanIISLog
—
—
yara
aspbackdoor_regdll
—
—
yara
sig_238_concon
—
—
yara
sig_238_FPipe
—
—
yara
aspbackdoor_asp3
—
—
yara
perlcmd_zip_Folder_cmd
—
—
yara
Antiy_Ports_1_21
—
—
yara
sig_238_iecv
—
—
yara
sig_238_TFTPD32
—
—
yara
Jc_ALL_WinEggDropShell_rar_Folder_Install_2
—
—
yara
sig_238_2323
—
—
yara
ASPack_ASPACK
—
—
yara
sig_238_sqlcmd
—
—
yara
ByPassFireWall_zip_Folder_Inject
—
—
yara
XYZCmd_zip_Folder_Readme
—
—
yara
RangeScan
—
—
yara
sig_238_cmd_2
—
—
yara
webshell_jsp_cmd
—
—
yara
UnPack_rar_Folder_TBack
—
—
← Prev
Next →