Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Observed TA453 Domain in TLS SNI rev 1 2024-05-06
suricata ET HUNTING SUSPICIOUS *.doc.exe in HTTP HEADER rev 13 2024-05-06
suricata ET MALWARE PyRation Variant - Command Sent to Client rev 2 2024-05-05
suricata ET MALWARE Suspected Powershell Empire POST M1 rev 8 2024-05-05
suricata ET EXPLOIT_KIT Parrot TDS Cleared Response M2 rev 2 2024-05-05
suricata ET MALWARE Win32.Drun Checkin rev 6 2024-05-05
suricata ET EXPLOIT_KIT Parrot TDS NDSW Check M2 rev 2 2024-05-05
suricata ET EXPLOIT_KIT Parrot TDS Malicious Response M2 rev 2 2024-05-05
suricata ET HUNTING Suspicious POST Format rev 3 2024-05-05
suricata ET MALWARE PyRation Variant - Action Sent to Client rev 2 2024-05-05
snort ET CURRENT_EVENTS RIG EK URI Struct Jun 13 2017 rev 2 2024-05-04
suricata ET MALWARE AHK.CREDSTEALER.A CnC Activity rev 4 2024-05-04
suricata ET INFO I2P Retrieving reseed info rev 7 2024-05-04
suricata ET INFO HotSpotShield Activity rev 7 2024-05-04
suricata ET MALWARE W32/Nymaim Checkin M2 rev 15 2024-05-04
suricata ET MALWARE GCleaner Downloader - Payload Response rev 3 2024-05-04
suricata ET MALWARE Win32/Backdoor.Dripion HTTP CnC Checkin rev 7 2024-05-04
suricata ET MALWARE MSIL.Zapchast Checkin rev 8 2024-05-04
suricata ET MALWARE BACKCONFIG CnC Downloader Activity rev 4 2024-05-04
suricata ET MALWARE Cobalt Strike Malleable C2 JQuery Custom Profile M2 rev 6 2024-05-04
suricata ET MALWARE Win32/DTStealer CnC Activity rev 4 2024-05-04
suricata ET MALWARE Nemucod JS Downloader June 12 2017 rev 8 2024-05-04
suricata ET MALWARE CryptoWall Check-in M2 rev 6 2024-05-04
suricata ET MOBILE_MALWARE Android/TrojanDropper.Agent.GWO Checkin rev 6 2024-05-04
suricata ET MALWARE OSX/Mami CnC Checkin rev 6 2024-05-04
suricata ET MALWARE Ransomware Locky CnC Beacon 4 21 May rev 5 2024-05-04
suricata ET P2P zzima_loader rev 8 2024-05-04
suricata ET MALWARE CryptoShield Ransomware Checkin rev 7 2024-05-04
suricata ET EXPLOIT_KIT RIG EK URI Struct Jun 13 2017 rev 7 2024-05-04
suricata ET MALWARE Win32/CollectorStealer CnC Exfil M3 rev 5 2024-05-04
suricata ET MALWARE Suspected USBFERRY CnC rev 3 2024-05-04
suricata ET MALWARE Trickbot Checkin Response rev 9 2024-05-04
suricata ET MALWARE Kimsuky Related CnC Activity rev 3 2024-05-04
suricata ET MALWARE Win32/Agent.XST Checkin rev 6 2024-05-04
suricata ET MALWARE Possible Deep Panda User-Agent rev 8 2024-05-04
suricata ET MALWARE Fileless infection dropped by EK CnC Beacon rev 6 2024-05-04
suricata ET MOBILE_MALWARE Trojan-Dropper.AndroidOS.Anatsa Checkin rev 6 2024-05-04
suricata ET MALWARE Win32/Rodecap/Travle/PYLOT CnC Checkin M2 rev 6 2024-05-04
suricata ET ADWARE_PUP Adware.MultiInstaller checkin 2 rev 7 2024-05-04
snort ET TROJAN Goldoon Botnet Payload Retrieval Attempt rev 1 2024-05-03