Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SERVER ATTACKER SQLi - SELECT and Schema Columns M2 rev 1 2024-05-21
suricata ET MALWARE AnonymousRAT Payload Retrieval Attempt rev 1 2024-05-21
suricata ET WEB_SERVER Possible bash shell piped to dev tcp Inbound to WebServer M1 rev 5 2024-05-21
suricata ET WEB_SERVER ATTACKER SQLi - SELECT and Schema Columns M1 rev 3 2024-05-21
suricata GPL CHAT ICQ access rev 16 2024-05-21
suricata ET CURRENT_EVENTS [Fireeye] Backdoor.HTTP.BEACON.[CSBundle Original Server] rev 6 2024-05-21
suricata ET WEB_SERVER SQLi - SELECT and sysobject M1 rev 3 2024-05-21
suricata GPL WEB_SERVER .htpasswd access rev 10 2024-05-21
suricata ET WEB_SERVER Possible bash shell piped to dev tcp Inbound to WebServer M3 rev 1 2024-05-21
suricata ET WEB_SERVER Possible bash shell piped to dev tcp Inbound to WebServer M2 rev 1 2024-05-21
suricata ET WEB_SERVER SQLi - SELECT and sysobject M2 rev 1 2024-05-21
snort ET TROJAN ACR Stealer Data Exfiltration Attempt M2 rev 1 2024-05-16
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN Horabot Payload Inbound rev 1 2024-05-16
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN Horabot CnC Host Details Exfil rev 1 2024-05-16
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
snort ET TROJAN ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
suricata ET MALWARE ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
suricata ET MALWARE ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
suricata ET MALWARE ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
suricata ET MALWARE ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
suricata ET MALWARE Ponmocup Post Infection DNS Lookup messagewild rev 6 2024-05-16
suricata ET MALWARE Horabot CnC Host Details Exfil rev 1 2024-05-16
suricata ET MALWARE ACR Stealer Data Exfiltration Attempt M2 rev 1 2024-05-16
suricata ET MALWARE ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
suricata ET MALWARE ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
suricata ET MALWARE Horabot Payload Inbound rev 1 2024-05-16
suricata ET MALWARE ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
suricata ET MALWARE ACR Stealer CnC Domain in DNS Lookup rev 1 2024-05-16
suricata ET MALWARE TorrentLocker DNS Lookup rev 7 2024-05-16