Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET RETIRED QwixxRAT - Telegram CnC Checkin rev 3 2024-10-01
suricata ET RETIRED Stellar Stealer Data Exfiltration Attempt M5 rev 4 2024-10-01
suricata ET RETIRED Camaro Dragon APT - Horse Shell CnC Checkin rev 3 2024-10-01
suricata ET RETIRED DDoSia Client Target Retrieval rev 3 2024-10-01
suricata ET RETIRED pswshopro_bot Stealer data exfiltration attempt rev 4 2024-10-01
suricata ET RETIRED Zenlod System Information Retrieval rev 3 2024-10-01
suricata ET RETIRED DDoSia Client CnC Checkin rev 3 2024-10-01
suricata ET RETIRED BotLoader Retrieving Additional Payloads rev 3 2024-10-01
suricata ET RETIRED BellaCiao ASPX Backdoor Response rev 4 2024-10-01
suricata ET RETIRED Stellar Stealer Data Exfiltration Attempt M2 rev 4 2024-10-01
suricata ET RETIRED Trojan.PSW.Autoit Data Exfiltration Attempt rev 3 2024-10-01
snort ET RETIRED Patchwork APT BADNEWS Variant CnC Checkin M2 rev 2 2024-09-30
snort ET RETIRED LogStih Stealer Data Exfiltration Attempt rev 2 2024-09-30
snort ET RETIRED APT37 M2RAT CnC Server Command - UPD rev 2 2024-09-30
snort ET RETIRED Win32/S1deload Stealer CnC Checkin - Get Tasking rev 2 2024-09-30
snort ET RETIRED LogStih Stealer CnC Checkin rev 2 2024-09-30
snort ET RETIRED Sharp Panda Soul Framework CnC Checkin rev 2 2024-09-30
snort ET RETIRED APT37 M2RAT CnC Server Command - RES rev 2 2024-09-30
snort ET RETIRED Patchwork APT BADNEWS Variant CnC Checkin M1 rev 2 2024-09-30
snort ET RETIRED Malvirt/KoiVM Downloader Variant Payload Retrieval Request rev 2 2024-09-30
snort ET RETIRED APT37 M2RAT CnC Server Command - OKR rev 2 2024-09-30
snort ET RETIRED Win32/Wacatac.B!ml Data Exfiltration rev 2 2024-09-30
snort ET RETIRED GCleaner CnC Checkin M2 rev 2 2024-09-30
snort ET RETIRED Playful Taurus Malicious SSL Certificate Observed rev 2 2024-09-30
snort ET RETIRED APT37 M2RAT CnC Server Command - UNI rev 2 2024-09-30
snort ET RETIRED SOMNIRECORD Backdoor DATA Command in DNS Query rev 5 2024-09-30
snort ET RETIRED APT37 M2RAT CnC Server Command - CMD rev 2 2024-09-30
snort ET RETIRED Hiatus RAT CnC Checkin rev 2 2024-09-30
snort ET RETIRED GCleaner CnC Checkin M1 rev 2 2024-09-30
snort ET RETIRED Win32/VoipRaider Data Collection Attempt rev 2 2024-09-30
snort ET RETIRED APT37 M2RAT CnC Server Command - URL rev 2 2024-09-30
snort ET RETIRED Win32/Fabookie.ek CnC Domain in DNS Lookup rev 2 2024-09-30
snort ET RETIRED Potential GCleaner CnC Checkin rev 5 2024-09-30
snort ET RETIRED Parallax CnC Response Activity M18 rev 2 2024-09-30
snort ET RETIRED Win32/PSWStealer Data Exfiltration Attempt rev 2 2024-09-30
snort ET RETIRED Vidar Stealer CnC Checkin rev 2 2024-09-30
snort ET RETIRED SOMNIRECORD Backdoor PROBE Command in DNS Query rev 5 2024-09-30
snort ET RETIRED GCleaner Payload Retrieval Attempt rev 2 2024-09-30
snort ET TROJAN NamelessC2 SSL/TLS Certificate Observed rev 1 2024-09-30
snort ET RETIRED Crashedtech Loader CnC Checkin rev 2 2024-09-30