Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET ADWARE_PUP MALWARE W32/WinWrapper.Adware User-Agent rev 8 2024-05-01
suricata ET MOBILE_MALWARE Android/Opfake.A Country CnC Beacon rev 10 2024-05-01
suricata ET MALWARE Win32/DanijBot CnC Task Status rev 5 2024-05-01
suricata ET MALWARE StealerNeko CnC Checkin rev 5 2024-05-01
suricata ET ADWARE_PUP W32/BettrExperience.Adware Update Checkin rev 7 2024-05-01
suricata ET ADWARE_PUP W32/BettrExperience.Adware Initial Checkin rev 7 2024-05-01
suricata ET ADWARE_PUP Loadmoney Checkin 4 rev 8 2024-05-01
suricata ET MALWARE MagikPOS Downloader Checkin rev 4 2024-05-01
suricata ET MALWARE MSIL/Almashreq CnC Checkin rev 5 2024-05-01
suricata ET MALWARE Win32/DanijBot CnC Checkin rev 5 2024-05-01
suricata ET MALWARE Clipsa Stealer - Coinminer Download rev 5 2024-05-01
suricata ET MALWARE APT28/Sofacy Zebrocy Go Variant CnC Activity rev 4 2024-05-01
suricata ET ADWARE_PUP Win32/InstallCore Initial Install Activity 1 rev 6 2024-05-01
suricata ET ADWARE_PUP DealPly Adware CnC Beacon 3 rev 6 2024-05-01
suricata ET MALWARE OilRig OopsIE CnC Checkin M3 rev 5 2024-05-01
suricata ET MALWARE ELF/Chacha.DDoS/Xor.DDoS Stage 2 CnC Checkin rev 4 2024-05-01
suricata ET WEB_SPECIFIC_APPS Jenkins Chained Exploits CVE-2018-1000861 and CVE-2019-1003000 M1 rev 7 2024-05-01
suricata ET MALWARE Win32/Onliner CnC Checkin rev 5 2024-05-01
suricata ET ADWARE_PUP MALWARE W32/WinWrapper.Adware POST CnC Beacon rev 8 2024-05-01
suricata ET MOBILE_MALWARE Android/BasBanke CnC Checkin rev 4 2024-05-01
suricata ET EXPLOIT_KIT Bingo EK Payload Download rev 6 2024-05-01
suricata ET INFO DLL File Download Request via Discord rev 3 2024-05-01
suricata ET MALWARE HYDSEVEN VBS CnC Host Information Checkin rev 5 2024-05-01
suricata ET MALWARE Alphacrypt/TeslaCrypt Ransomware CnC Beacon rev 10 2024-05-01
suricata ET MALWARE OSX/GMERA.B CnC Checkin rev 4 2024-05-01
suricata ET HUNTING Request for .bin with BITS/ User-Agent rev 12 2024-05-01
suricata ET MALWARE Win32/Formgrabber Data Exfil rev 5 2024-05-01
suricata ET MALWARE MSIL/Unk.HT-Based Ransomware CnC Checkin rev 5 2024-05-01
suricata ET MALWARE MSIL APT28 Zebrocy/Zekapab Reporting to CnC rev 4 2024-05-01
suricata ET INFO Metasploit Framework Checking For Update rev 9 2024-05-01
suricata ET INFO RAR File Download Request via Discord rev 3 2024-05-01
suricata ET MALWARE APT Lazarus Nukesped Downloader rev 4 2024-05-01
suricata ET MALWARE W32/Pterodo CnC Checkin rev 4 2024-05-01
suricata ET MALWARE Possible iKittens OSX MacDownloader CNC Beacon rev 5 2024-05-01
suricata ET MALWARE APT28/Sofacy Zebrocy Go Variant Checkin rev 5 2024-05-01
suricata ET ADWARE_PUP DealPly Adware CnC Beacon 2 rev 7 2024-05-01
suricata ET ADWARE_PUP Rogue.WinPCDefender Checkin rev 8 2024-05-01
suricata ET WEB_SERVER Possible Darkleech C2 rev 6 2024-05-01
suricata ET MALWARE ICEFOG JAVAFOG JAR checkin rev 8 2024-05-01
suricata ET MALWARE ApolloLocker Ransomware CnC Checkin rev 5 2024-05-01