Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
sigma Outbound Network Connection Initiated By Cmstp.EXE test 2024-05-31
sigma Uncommon Network Connection Initiated By Certutil.EXE test 2024-05-31
sigma Local Network Connection Initiated By Script Interpreter test 2024-05-31
snort ET TROJAN Possible KONNI URI Path Observed rev 3 2024-05-29
suricata ET MALWARE Possible KONNI URI Path Observed rev 5 2024-05-29
sigma New File Exclusion Added To Time Machine Via Tmutil - MacOS test 2024-05-29
sigma Time Machine Backup Deletion Attempt Via Tmutil - MacOS test 2024-05-29
sigma Time Machine Backup Disabled Via Tmutil - MacOS test 2024-05-29
snort ET TROJAN Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
snort ET TROJAN Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
snort ET TROJAN Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
snort ET TROJAN Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
snort ET TROJAN Suspected TA450 Activity rev 1 2024-05-28
snort ET TROJAN Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
snort ET MOBILE_MALWARE Suspected APT Starry Addax CnC Domain in DNS Lookup 2 rev 1 2024-05-28
snort ET TROJAN CrimsonRAT Host Details Exfil rev 1 2024-05-28
snort ET TROJAN Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
snort ET TROJAN Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
snort ET TROJAN Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
snort ET TROJAN Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
snort ET TROJAN Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
snort ET TROJAN Clipboard Monitor Data Exfiltration Attempt rev 1 2024-05-28
snort ET MOBILE_MALWARE Suspected APT Starry Addax DNS Lookup rev 1 2024-05-28
snort ET EXPLOIT Fortinet FortiSIEM Unauthenticated Command Injection CVE-2024-23108 rev 1 2024-05-28
snort ET TROJAN Tenorshare Google Analytics Checkin rev 3 2024-05-28
suricata ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
suricata ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
suricata ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
suricata ET MALWARE Clipboard Monitor Data Exfiltration Attempt rev 1 2024-05-28
suricata ET MOBILE_MALWARE Suspected APT Starry Addax DNS Lookup rev 1 2024-05-28
suricata ET MALWARE Suspected TA450 Activity rev 1 2024-05-28
suricata ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
suricata ET EXPLOIT Fortinet FortiSIEM Unauthenticated Command Injection CVE-2024-23108 rev 1 2024-05-28
suricata ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
suricata ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
suricata ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
suricata ET MALWARE CrimsonRAT Host Details Exfil rev 1 2024-05-28
suricata ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
suricata ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup rev 1 2024-05-28
suricata ET MOBILE_MALWARE Suspected APT Starry Addax CnC Domain in DNS Lookup 2 rev 1 2024-05-28