Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE JaskaGO Infrastructure Observed Inbound rev 1 2024-07-25
snort ET TROJAN ASYNC RAT Payload Inbound rev 1 2024-07-24
suricata ET MALWARE ASYNC RAT Payload Inbound rev 1 2024-07-24
snort ET SCAN NETWORK Incoming Masscan detected rev 3 2024-07-23
snort ET TROJAN Lumma Stealer CnC Host Checkin rev 1 2024-07-23
snort ET TROJAN Daolpu Stealer Data Exfiltration Attempt rev 1 2024-07-23
suricata ET MALWARE Lumma Stealer CnC Host Checkin rev 1 2024-07-23
suricata ET MALWARE Daolpu Stealer Data Exfiltration Attempt rev 1 2024-07-23
sigma Potential BOINC Software Execution (UC-Berkeley Signature) test 2024-07-23
sigma Headless Process Launched Via Conhost.EXE test 2024-07-23
sigma Renamed BOINC Client Execution test 2024-07-23
sigma Powershell Executed From Headless ConHost Process test 2024-07-23
sigma Process Launched Without Image Name test 2024-07-23
snort ET INFO TinyURL to Netlify Redirect rev 2 2024-07-22
snort ET TROJAN UNK_HamsaHatef Related URI rev 1 2024-07-22
snort ET WEB_SERVER Possible SQL Injection INSERT INTO in HTTP Request Body rev 2 2024-07-22
snort ET WEB_SERVER Possible SQL Injection SELECT CAST in HTTP Request Body rev 2 2024-07-22
snort ET WEB_SERVER Possible SQL Injection DELETE FROM in HTTP Request Body rev 2 2024-07-22
suricata ET WEB_SERVER Possible SQL Injection INSERT INTO in HTTP Request Body rev 2 2024-07-22
suricata ET MALWARE Covenant .NET Framework SSL/TLS Certificate Observed rev 2 2024-07-22
suricata ET MALWARE Mythic Framework SSL/TLS Certificate Observed rev 1 2024-07-22
suricata ET MALWARE UNK_HamsaHatef Related URI rev 1 2024-07-22
suricata ET WEB_SERVER Possible SQL Injection DELETE FROM in HTTP Request Body rev 2 2024-07-22
suricata ET WEB_SERVER Possible SQL Injection SELECT CAST in HTTP Request Body rev 2 2024-07-22
sigma Unattend.XML File Access Attempt test 2024-07-22
sigma NTLM Logon test 2024-07-22
sigma Potential DLL Sideloading Of DbgModel.DLL test 2024-07-22
sigma Microsoft Teams Sensitive File Access By Uncommon Applications test 2024-07-22
sigma Github High Risk Configuration Disabled test 2024-07-22
sigma Anydesk Temporary Artefact test 2024-07-20
snort ET TROJAN Win32/Kryptik_AGen.DOP C2 Checkin rev 1 2024-07-19
snort ET TROJAN Win32/saolei CnC Host Checkin rev 1 2024-07-19
suricata ET MALWARE Win32/Kryptik_AGen.DOP C2 Checkin rev 1 2024-07-19
suricata ET MALWARE Win32/saolei CnC Host Checkin rev 1 2024-07-19
sigma Github Secret Scanning Feature Disabled test 2024-07-19
snort ET POLICY Vulnerable Java Version 22.0.x Detected rev 2 2024-07-18
snort ET POLICY Vulnerable Java Version 21.0.x Detected rev 4 2024-07-18
snort ET POLICY Vulnerable Java Version 1.8.x Detected rev 41 2024-07-18
snort ET POLICY Vulnerable Java Version 17.0.x Detected rev 8 2024-07-18
suricata ET INFO Vulnerable Java Version 1.8.x Detected rev 43 2024-07-18