Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Wordpress Social Warfare Plugin Exploit CMS Users Exfil M1 rev 1 2024-06-25
suricata ET MALWARE Wordpress Social Warfare Plugin Exploit CMS Users Exfil M2 rev 1 2024-06-25
sigma CVE-2023-1389 Potential Exploitation Attempt - Unauthenticated Command Injection In TP-Link Archer AX21 test 2024-06-25
snort ET TROJAN Mint Stealer Data Exfiltration Server Response rev 1 2024-06-24
snort ET TROJAN Mint Stealer CnC Checkin rev 1 2024-06-24
snort ET TROJAN Mint Stealer CnC Server Response rev 1 2024-06-24
snort ET INFO Centrastage RMM Agent Checkin rev 1 2024-06-24
snort ET CURRENT_EVENTS MyGovAU Credential Phish Landing Page 2024-06-24 rev 1 2024-06-24
snort ET TROJAN Mint Stealer Injection Server Response rev 1 2024-06-24
snort ET INFO Centrastage RMM Server Response M2 rev 1 2024-06-24
snort ET INFO Centrastage RMM Agent Update Request rev 1 2024-06-24
snort ET TROJAN Mint Stealer Data Exfiltration Attempt rev 1 2024-06-24
snort ET TROJAN Mint Stealer Injection Request rev 1 2024-06-24
snort ET INFO Centrastage RMM Server Response M1 rev 1 2024-06-24
suricata ET MALWARE Mint Stealer Data Exfiltration Server Response rev 1 2024-06-24
suricata ET MALWARE Mint Stealer CnC Server Response rev 1 2024-06-24
suricata ET REMOTE_ACCESS Centrastage RMM Agent Checkin rev 1 2024-06-24
suricata ET PHISHING MyGovAU Credential Phish Landing Page 2024-06-24 rev 1 2024-06-24
suricata ET MALWARE Mint Stealer CnC Checkin rev 1 2024-06-24
suricata ET REMOTE_ACCESS Centrastage RMM Server Response M2 rev 1 2024-06-24
suricata ET MALWARE Mint Stealer Data Exfiltration Attempt rev 1 2024-06-24
suricata ET MALWARE Mint Stealer Injection Server Response rev 1 2024-06-24
suricata ET REMOTE_ACCESS Centrastage RMM Agent Update Request rev 1 2024-06-24
suricata ET MALWARE Mint Stealer Injection Request rev 1 2024-06-24
sigma Files With System DLL Name In Unsuspected Locations test 2024-06-24
sigma DNS Query To AzureWebsites.NET By Non-Browser Process test 2024-06-24
snort ET EXPLOIT Archeevo 5.0 - Local File Inclusion rev 2 2024-06-23
snort ET WEB_SPECIFIC_APPS Jiecheng Management Information System CWSFinanceCommon SQL injection rev 2 2024-06-23
snort ET EXPLOIT SugarCRM Auth Bypass Attempt 2022-12-31 rev 2 2024-06-23
snort ET EXPLOIT WordPress Plugin cab-fare-calculator 1.0.3 - Local File Inclusion rev 2 2024-06-23
suricata ET WEB_SPECIFIC_APPS Jiecheng Management Information System CWSFinanceCommon SQL injection rev 2 2024-06-23
suricata ET EXPLOIT SugarCRM Auth Bypass Attempt 2022-12-31 rev 2 2024-06-23
suricata ET EXPLOIT Archeevo 5.0 - Local File Inclusion rev 2 2024-06-23
suricata ET EXPLOIT WordPress Plugin cab-fare-calculator 1.0.3 - Local File Inclusion rev 2 2024-06-23
sigma Potential CSharp Streamer RAT Loading .NET Executable Image test 2024-06-22
snort ET INFO DYNAMIC_DNS Query to .giswebservice .com Domain rev 1 2024-06-21
snort ET MOBILE_MALWARE Android Rafel RAT Checkin M2 rev 1 2024-06-21
snort ET MOBILE_MALWARE Android Rafel RAT Checkin M1 rev 2 2024-06-21
snort ET INFO DYNAMIC_DNS Query to .afshin .ir Domain rev 1 2024-06-21
suricata ET MOBILE_MALWARE Android Rafel RAT Checkin M2 rev 1 2024-06-21