Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Possible Sniffthem/Tnaket CnC Checkin rev 1 2024-06-26
snort ET TROJAN Polyfill Malicious Redirect Attempt M2 rev 1 2024-06-26
snort ET TROJAN Polyfill Malicious Redirect Attempt M3 rev 1 2024-06-26
snort ET TROJAN Polyfill Malicious Redirect Attempt M1 rev 1 2024-06-26
snort ET TROJAN Possible Sniffthem/Tnaket User-Agent Observed M1 rev 1 2024-06-26
snort ET TROJAN Possible Sniffthem/Tnaket User-Agent Observed M2 rev 1 2024-06-26
snort ET TROJAN Possible Sniffthem/Tnaket Payload Retrieval Attempt rev 1 2024-06-26
snort ET TROJAN Possible Sniffthem/Tnaket User-Agent Observed M3 rev 1 2024-06-26
suricata ET MALWARE Possible Sniffthem/Tnaket User-Agent Observed M1 rev 1 2024-06-26
suricata ET MALWARE Possible Sniffthem/Tnaket Payload Retrieval Attempt rev 1 2024-06-26
suricata ET MALWARE Polyfill Malicious Redirect Attempt M1 rev 1 2024-06-26
suricata ET MALWARE Possible Sniffthem/Tnaket User-Agent Observed M2 rev 1 2024-06-26
suricata ET MALWARE Possible Sniffthem/Tnaket User-Agent Observed M3 rev 1 2024-06-26
suricata ET MALWARE Polyfill Malicious Redirect Attempt M3 rev 1 2024-06-26
suricata ET MALWARE Polyfill Malicious Redirect Attempt M2 rev 1 2024-06-26
suricata ET MALWARE Possible Sniffthem/Tnaket CnC Checkin rev 1 2024-06-26
sigma MSSQL Disable Audit Settings test 2024-06-26
sigma MSSQL XPCmdshell Option Change test 2024-06-26
sigma MSSQL Add Account To Sysadmin Role test 2024-06-26
sigma DSInternals Suspicious PowerShell Cmdlets - ScriptBlock test 2024-06-26
sigma MSSQL Server Failed Logon test 2024-06-26
sigma DPAPI Backup Keys And Certificate Export Activity IOC test 2024-06-26
sigma Uncommon Child Process Of Setres.EXE test 2024-06-26
sigma MSSQL SPProcoption Set test 2024-06-26
sigma MSSQL XPCmdshell Suspicious Execution test 2024-06-26
sigma DSInternals Suspicious PowerShell Cmdlets test 2024-06-26
sigma Windows LAPS Credential Dump From Entra ID test 2024-06-26
sigma HackTool - SharpDPAPI Execution test 2024-06-26
snort ET WEB_SPECIFIC_APPS ShowDoc File Upload Vulnerability rev 1 2024-06-25
snort ET TROJAN Wordpress Social Warfare Plugin Exploit Payload URI in GET Request rev 1 2024-06-25
snort ET TROJAN Wordpress Social Warfare Plugin Exploit CMS Users Exfil M3 rev 1 2024-06-25
snort ET TROJAN Wordpress Social Warfare Plugin Exploit CMS Users Exfil M2 rev 1 2024-06-25
snort ET TROJAN Wordpress Social Warfare Plugin Exploit CMS Users Exfil M1 rev 1 2024-06-25
snort ET USER_AGENTS websocket-sharp User-Agent Observed rev 1 2024-06-25
snort ET WEB_SPECIFIC_APPS Fanwei eMobile File Upload Vulnerability rev 1 2024-06-25
suricata ET USER_AGENTS websocket-sharp User-Agent Observed rev 1 2024-06-25
suricata ET MALWARE Wordpress Social Warfare Plugin Exploit CMS Users Exfil M2 rev 1 2024-06-25
suricata ET MALWARE Wordpress Social Warfare Plugin Exploit Payload URI in GET Request rev 1 2024-06-25
suricata ET MALWARE Wordpress Social Warfare Plugin Exploit CMS Users Exfil M1 rev 1 2024-06-25
suricata ET MALWARE Wordpress Social Warfare Plugin Exploit CMS Users Exfil M3 rev 1 2024-06-25