Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
yara php_dns — —
yara php_reverse_shell — —
yara php_shell — —
yara asp_proxy — —
yara settings — —
yara asp_shell — —
yara php_killnc — —
yara asp_file — —
yara crime_ole_loadswf_cve_2018_4878 — —
yara aspbackdoor_ipclear — —
yara sig_238_findoor — —
yara ArtTray_zip_Folder_ArtTray — —
yara InstGina — —
yara FPipe2_0 — —
yara aspbackdoor_entice — —
yara aspbackdoor_EDIT — —
yara SplitJoin_V1_3_3_rar_Folder_3 — —
yara sig_238_Glass2k — —
yara sig_238_nbtdump — —
yara sig_238_RunAsEx — —
yara sqlcheck — —
yara CleanIISLog — —
yara aspbackdoor_regdll — —
yara sig_238_concon — —
yara sig_238_FPipe — —
yara aspbackdoor_asp3 — —
yara perlcmd_zip_Folder_cmd — —
yara Antiy_Ports_1_21 — —
yara sig_238_iecv — —
yara sig_238_TFTPD32 — —
yara Jc_ALL_WinEggDropShell_rar_Folder_Install_2 — —
yara sig_238_2323 — —
yara ASPack_ASPACK — —
yara sig_238_sqlcmd — —
yara ByPassFireWall_zip_Folder_Inject — —
yara XYZCmd_zip_Folder_Readme — —
yara RangeScan — —
yara sig_238_cmd_2 — —
yara webshell_jsp_cmd — —
yara UnPack_rar_Folder_TBack — —