Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET RETIRED Mispadu Stealer CnC Checkin M2 rev 2 2024-10-03
suricata ET RETIRED Earth Preta PUBLOAD Activity M2 rev 3 2024-10-03
suricata ET RETIRED Sharp Panda APT Related Activity M3 rev 3 2024-10-03
suricata ET RETIRED Andariel Group Nukesped Variant CnC Checkin rev 3 2024-10-03
suricata ET RETIRED Mispadu Stealer CnC Checkin M1 rev 3 2024-10-03
suricata ET RETIRED Earth Preta PUBLOAD Activity M3 rev 3 2024-10-03
suricata ET RETIRED Mispadu Stealer CnC Checkin M2 rev 3 2024-10-03
snort ET RETIRED Possible ToneShell CnC Checkin M3 rev 2 2024-10-02
snort ET RETIRED [ANY.RUN] Echida Botnet Check-In M2 rev 2 2024-10-02
snort ET RETIRED [ANY.RUN] Echida Botnet Check-In M1 rev 2 2024-10-02
snort ET TROJAN NamelessC2 Implant Terminal Checkin rev 1 2024-10-02
snort ET RETIRED ZenRAT Request Module CnC Response rev 3 2024-10-02
suricata ET RETIRED Possible ToneShell CnC Checkin M3 rev 3 2024-10-02
suricata ET RETIRED [ANY.RUN] Echida Botnet Check-In M1 rev 3 2024-10-02
suricata ET RETIRED [ANY.RUN] Echida Botnet Check-In M2 rev 3 2024-10-02
suricata ET MALWARE NamelessC2 Implant Terminal Checkin rev 1 2024-10-02
suricata ET RETIRED ZenRAT Request Module CnC Response rev 3 2024-10-02
snort ET RETIRED Stellar Stealer Data Exfiltration Attempt M3 rev 2 2024-10-01
snort ET RETIRED DDoSia Client Target Retrieval rev 2 2024-10-01
snort ET RETIRED BellaCiao ASPX Backdoor Response rev 2 2024-10-01
snort ET RETIRED BotLoader CnC Checkin rev 2 2024-10-01
snort ET RETIRED BotLoader Retrieving Additional Payloads rev 2 2024-10-01
snort ET RETIRED Stellar Stealer Data Exfiltration Attempt M5 rev 2 2024-10-01
snort ET RETIRED Stellar Stealer Data Exfiltration Attempt M4 rev 2 2024-10-01
snort ET RETIRED Stellar Stealer Data Exfiltration Attempt M2 rev 2 2024-10-01
snort ET RETIRED Stellar Stealer Data Exfiltration Attempt M1 rev 2 2024-10-01
snort ET RETIRED Zenlod System Information Retrieval rev 2 2024-10-01
snort ET RETIRED Camaro Dragon APT - Horse Shell CnC Checkin rev 2 2024-10-01
snort ET RETIRED DDoSia Client CnC Checkin rev 2 2024-10-01
snort ET RETIRED Trojan.PSW.Autoit Data Exfiltration Attempt rev 2 2024-10-01
snort ET RETIRED QwixxRAT - Telegram CnC Checkin rev 2 2024-10-01
snort ET RETIRED Papercut MF/NG User/Group Sync Python Backdoor Trigger rev 2 2024-10-01
snort ET RETIRED pswshopro_bot Stealer CnC Checkin rev 2 2024-10-01
snort ET RETIRED pswshopro_bot Stealer data exfiltration attempt rev 2 2024-10-01
suricata ET RETIRED Stellar Stealer Data Exfiltration Attempt M4 rev 4 2024-10-01
suricata ET RETIRED Stellar Stealer Data Exfiltration Attempt M2 rev 4 2024-10-01
suricata ET RETIRED Trojan.PSW.Autoit Data Exfiltration Attempt rev 3 2024-10-01
suricata ET RETIRED DDoSia Client CnC Checkin rev 3 2024-10-01
suricata ET RETIRED BotLoader CnC Checkin rev 4 2024-10-01
suricata ET RETIRED BotLoader Retrieving Additional Payloads rev 3 2024-10-01