Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
yara OPCLEAVER_CCProxy_Config — —
yara OPCLEAVER_Parviz_Developer — —
yara OPCLEAVER_zhmimikatz — —
yara OPCLEAVER_zhLookUp — —
yara OPCLEAVER_zhCat — —
yara OPCLEAVER_wndTest — —
yara OPCLEAVER_pvz_out — —
yara OPCLEAVER_pvz_in — —
yara OPCLEAVER_mimikatzWrapper — —
yara OPCLEAVER_kagent — —
yara OPCLEAVER_csext — —
yara OPCLEAVER_antivirusdetector — —
yara OPCLEAVER_ZhoupinExploitCrew — —
yara OPCLEAVER_TinyZBot — —
yara OPCLEAVER_SynFlooder — —
yara OPCLEAVER_SmartCopy2 — —
yara OPCLEAVER_ShellCreator2 — —
yara OPCLEAVER_NetC — —
yara OPCLEAVER_LoggerModule — —
yara OPCLEAVER_Jasus — —
yara OPCLEAVER_BackDoorLogger — —
yara zhmimikatz — —
yara zhLookUp — —
yara zhCat — —
yara wndTest — —
yara pvz_out — —
yara pvz_in — —
yara mimikatzWrapper — —
yara kagent — —
yara csext — —
yara antivirusdetector — —
yara TinyZBot — —
yara IronTiger_GetPassword_x64 — —
yara IronTiger_EFH3_encoder — —
yara IronTiger_dnstunnel — —
yara IronTiger_dllshellexc2010 — —
yara IronTiger_ChangePort_Toolkit_ChangePortExe — —
yara IronTiger_ChangePort_Toolkit_driversinstall — —
yara IronTiger_ASPXSpy — —
yara Industroyer_Malware_5 — —