Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET ADWARE_PUP Win32/SoftPulse.H Checkin rev 8 2024-05-01
suricata ET MOBILE_MALWARE Android/Kemoge Checkin rev 6 2024-05-01
suricata ET MALWARE Win32/Rarog Stealer CnC Keep-Alive rev 6 2024-05-01
suricata ET INFO AutoIt User Agent Executable Request rev 10 2024-05-01
suricata ET MALWARE MSIL APT28 Zebrocy/Zekapab Reporting to CnC rev 4 2024-05-01
suricata ET MALWARE W32/Pterodo.CL CnC Checkin rev 5 2024-05-01
suricata ET MOBILE_MALWARE Android/Locker.B Checkin 1 rev 6 2024-05-01
suricata ET MALWARE Amadey Stealer CnC rev 4 2024-05-01
suricata ET MALWARE jFect HTTP CnC Checkin rev 6 2024-05-01
suricata ET MALWARE Win32/Phorpiex CnC Checkin rev 6 2024-05-01
suricata ET MALWARE Win32/DanijBot CnC Task Status rev 5 2024-05-01
suricata ET MALWARE Alphacrypt/TeslaCrypt Ransomware CnC Beacon rev 10 2024-05-01
suricata ET MALWARE AHK/BKDR_HTV.ZKGD-A CnC Checkin rev 5 2024-05-01
suricata ET MALWARE Python.Ragua Checkin rev 7 2024-05-01
suricata ET MOBILE_MALWARE MOONSHINE payload C2 activity rev 5 2024-05-01
suricata ET MALWARE Win32/Retadup CnC Checkin M1 rev 5 2024-05-01
suricata ET MALWARE Possible iKittens OSX MacDownloader CNC Beacon rev 5 2024-05-01
suricata ET MALWARE StealerNeko CnC Checkin rev 5 2024-05-01
suricata ET MALWARE Sinowal/sinonet/mebroot/Torpig infected host checkin rev 14 2024-05-01
suricata ET ADWARE_PUP Crossrider Spyware Checkin rev 8 2024-05-01
suricata ET MALWARE TA399/SideWinder Stage 2 VBS Downloader Reporting Successful Infection rev 6 2024-05-01
suricata ET MALWARE Revcode RAT CnC 2 rev 5 2024-05-01
suricata ET INFO Android Device Connectivity Check rev 6 2024-05-01
suricata ET EXPLOIT Unk.IoT IPCamera Exploit Attempt Inbound rev 6 2024-05-01
suricata ET MALWARE BandarChor Ransomware Checkin rev 10 2024-05-01
suricata ET ADWARE_PUP PUP Win32.SoftPulse Retrieving data rev 9 2024-05-01
suricata ET MALWARE BePush/Kilim payload retrieval rev 8 2024-05-01
suricata ET MALWARE APT28/Sofacy Zebrocy Secondary Payload CnC Checkin rev 4 2024-05-01
suricata ET MALWARE Sakula/Mivast C2 Activity rev 6 2024-05-01
suricata ET ADWARE_PUP W32/BettrExperience.Adware Initial Checkin rev 7 2024-05-01
suricata ET MALWARE MSIL/Almashreq CnC Checkin rev 5 2024-05-01
suricata ET MALWARE Xwo CnC Activity rev 5 2024-05-01
suricata ET MALWARE VBS/TrojanDownloader.Agent.SEB Reporting Network Info rev 4 2024-05-01
suricata ET MALWARE Possible Sharik/Smoke Loader Microsoft Connectivity check rev 6 2024-05-01
suricata ET MALWARE InfoBot Sending Machine Details rev 5 2024-05-01
suricata ET ADWARE_PUP Loadmoney Checkin 4 rev 8 2024-05-01
suricata ET MALWARE MagikPOS Downloader Checkin rev 4 2024-05-01
suricata ET MALWARE Generic Win32.Autorun HTTP Post rev 11 2024-05-01
suricata ET MALWARE OilRig OopsIE CnC Checkin M4 rev 5 2024-05-01
suricata ET MOBILE_MALWARE Android/Opfake.A Country CnC Beacon rev 10 2024-05-01