Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE StealerNeko CnC Checkin rev 5 2024-05-01
suricata ET MALWARE Monsoon Tinytyphon CnC Beacon GET rev 6 2024-05-01
suricata ET MALWARE MSIL/Almashreq CnC Checkin rev 5 2024-05-01
suricata ET MALWARE Xwo CnC Activity rev 5 2024-05-01
suricata ET MALWARE MagikPOS Downloader Checkin rev 4 2024-05-01
suricata ET MALWARE Win32/Bisonal RC4 Encrypted 8 Byte Static CnC Checkin rev 5 2024-05-01
suricata ET MALWARE Python.Ragua Checkin rev 7 2024-05-01
suricata ET ADWARE_PUP MALWARE W32/WinWrapper.Adware POST CnC Beacon rev 8 2024-05-01
suricata ET ADWARE_PUP Win32/Adware.Adposhel.A Checkin 4 rev 7 2024-05-01
suricata ET ADWARE_PUP Adware.InstallCore.B Checkin rev 10 2024-05-01
suricata ET MALWARE HYDSEVEN VBS CnC Host Information Checkin rev 5 2024-05-01
suricata ET MALWARE PS/SunCrypt Ransomware CnC Activity rev 3 2024-05-01
suricata ET ADWARE_PUP Win32/InstallCore Initial Install Activity 1 rev 6 2024-05-01
suricata ET INFO DLL File Download Request via Discord rev 3 2024-05-01
suricata ET EXPLOIT_KIT Bingo EK Payload Download rev 6 2024-05-01
suricata ET MALWARE [PTsecurity] Donut Ransomware CnC Checkin rev 6 2024-05-01
suricata ET ADWARE_PUP PUP Win32.SoftPulse Retrieving data rev 9 2024-05-01
suricata ET MALWARE APT28/Sofacy Zebrocy Go Variant Downloader Error POST rev 4 2024-05-01
suricata ET MALWARE ApolloLocker Ransomware CnC Checkin rev 5 2024-05-01
suricata ET MALWARE Mera Keylogger POSTing keystrokes rev 7 2024-05-01
suricata ET MALWARE Possible Trojan.APT.9002 POST rev 6 2024-05-01
suricata ET INFO AutoIt User-Agent Downloading ZIP rev 7 2024-05-01
suricata ET ADWARE_PUP OSX/Adware.Pirrit CnC Activity 2 rev 6 2024-05-01
suricata ET ADWARE_PUP DealPly Adware CnC Beacon rev 8 2024-05-01
suricata ET ADWARE_PUP DealPly Adware CnC Beacon 2 rev 7 2024-05-01
suricata ET INFO AutoIt User Agent Executable Request rev 10 2024-05-01
suricata ET MOBILE_MALWARE Android/Xnore Fake Facebook Login Credentials Collected rev 4 2024-05-01
suricata ET WEB_SPECIFIC_APPS Jenkins Pre-auth User Information Leakage rev 6 2024-05-01
suricata ET ADWARE_PUP DealPly Adware CnC Beacon 4 rev 6 2024-05-01
suricata ET MALWARE OSX/GMERA.B CnC Checkin rev 4 2024-05-01
suricata ET ADWARE_PUP Rogue.WinPCDefender Checkin rev 8 2024-05-01
suricata ET MALWARE TeleBots VBS Backdoor CnC Beacon 1 rev 5 2024-05-01
snort ET TROJAN NOBELIUM - Cobalt Strike Malleable Profile M2 rev 3 2024-04-30
snort ET CURRENT_EVENTS Parrot TDS Malicious Response M2 rev 1 2024-04-30
snort ET CURRENT_EVENTS Parrot TDS Cleared Response M2 rev 1 2024-04-30
suricata ET MALWARE GCleaner Downloader Activity M5 rev 3 2024-04-30
suricata ET MALWARE Win64/Agent.BP System Info Exfil rev 3 2024-04-30
suricata ET MALWARE Win32/BLUELIGHT OAuth Login Attempt rev 3 2024-04-30
suricata ET MALWARE Win32/Delf.TJJ Variant CnC Activity rev 4 2024-04-30
suricata ET HUNTING Terse Request for .txt - Likely Hostile rev 3 2024-04-30