Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Lumma Stealer Related Fake Captcha Page Inbound M1 rev 1 2024-08-29
suricata ET MALWARE Lumma Stealer Related Fake Captcha Page Inbound M2 rev 1 2024-08-29
suricata ET MALWARE TA452 Trojan CnC Checkin M2 rev 1 2024-08-29
suricata ET WEB_SPECIFIC_APPS Fortra FileCatalyst Workflow Insecure HSQLDB Default Credentials rev 1 2024-08-29
suricata ET MALWARE TA452 Trojan CnC Checkin M1 rev 1 2024-08-29
sigma A Rule Has Been Deleted From The Windows Firewall Exception List test 2024-08-29
sigma Shell Invocation Via Ssh - Linux test 2024-08-29
sigma System Network Discovery - macOS test 2024-08-29
sigma Potential DLL Injection Via AccCheckConsole test 2024-08-29
sigma Suspicious Child Process Of Wermgr.EXE test 2024-08-29
snort ET CURRENT_EVENTS PigButcher Credential Phish Landing Page M5 2024-08-05 rev 1 2024-08-28
snort ET TROJAN Pingback OK Issued rev 2 2024-08-28
snort ET CURRENT_EVENTS PigButcher Credential Phish Landing Page M2 2024-08-05 rev 1 2024-08-28
snort ET CURRENT_EVENTS PigButcher Credential Phish Landing Page M3 2024-08-05 rev 1 2024-08-28
snort ET CURRENT_EVENTS PigButcher Credential Phish Landing Page M4 2024-08-05 rev 1 2024-08-28
snort ET TROJAN Win32/Hancitor Checkin rev 5 2024-08-28
snort ET CURRENT_EVENTS PigButcher Credential Phish Landing Page M1 2024-08-05 rev 1 2024-08-28
suricata ET PHISHING PigButcher Credential Phish Landing Page M3 2024-08-05 rev 1 2024-08-28
suricata ET PHISHING PigButcher Credential Phish Landing Page M1 2024-08-05 rev 1 2024-08-28
suricata ET PHISHING PigButcher Credential Phish Landing Page M4 2024-08-05 rev 1 2024-08-28
suricata ET MALWARE Pingback OK Issued rev 2 2024-08-28
suricata ET PHISHING PigButcher Credential Phish Landing Page M2 2024-08-05 rev 1 2024-08-28
suricata ET PHISHING PigButcher Credential Phish Landing Page M5 2024-08-05 rev 1 2024-08-28
suricata ET PHISHING PigButcher Kit Headers 2024-08-05 rev 1 2024-08-28
snort ET TROJAN Rodmacer Stealer Data Exfiltration Attempt rev 1 2024-08-27
snort ET TROJAN VersaMem Webshell Authentication Attempt M3 rev 1 2024-08-27
snort ET TROJAN VersaMem Webshell Authentication Attempt M1 rev 1 2024-08-27
snort ET TROJAN VersaMem Webshell Authentication Attempt M2 rev 1 2024-08-27
suricata ET MALWARE Rodmacer Stealer Data Exfiltration Attempt rev 1 2024-08-27
suricata ET MALWARE VersaMem Webshell Authentication Attempt M1 rev 1 2024-08-27
suricata ET MALWARE VersaMem Webshell Authentication Attempt M3 rev 1 2024-08-27
suricata ET MALWARE VersaMem Webshell Authentication Attempt M2 rev 1 2024-08-27
sigma Uncommon Sigverif.EXE Child Process test 2024-08-27
snort ET TROJAN Possible Cthulu Stealer URI Struct M1 rev 1 2024-08-26
snort ET TROJAN Possible Cthulu Stealer URI Struct M2 rev 1 2024-08-26
snort ET TROJAN SystemBC CnC Beacon rev 1 2024-08-26
suricata ET MALWARE SystemBC CnC Beacon rev 1 2024-08-26
suricata ET HUNTING Missing Content-Type in Multipart/Form-Data Request rev 1 2024-08-26
suricata ET MALWARE Possible Cthulu Stealer URI Struct M2 rev 1 2024-08-26
suricata ET MALWARE Possible Cthulu Stealer URI Struct M1 rev 1 2024-08-26