Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET HUNTING Request to .CF Domain with Minimal Headers rev 4 2024-04-30
suricata ET ADWARE_PUP SimpleHelp Remote Access Software Activity rev 3 2024-04-30
suricata ET MALWARE Moose CnC Request M1 rev 7 2024-04-30
suricata ET HUNTING Suspicious Terse Request for .pif rev 3 2024-04-30
suricata ET MALWARE W32/Threebyte.APT Checkin rev 5 2024-04-30
suricata ET MALWARE [FIREEYE] SLIGHTPULSE Webshell Activity M2 rev 3 2024-04-30
suricata ET MOBILE_MALWARE Android/SlemBunk.Banker Phished Credentials Upload rev 5 2024-04-30
suricata ET MALWARE [ANY.RUN] Win32/RootTeam Stealer CnC Exfil M3 rev 4 2024-04-30
suricata ET MALWARE TA402/Molerats CnC Activity rev 5 2024-04-30
suricata ET EXPLOIT_KIT RIG Payload URI Struct March 20 2015 rev 5 2024-04-30
suricata ET MALWARE Ransomware Win32/WinPlock.A CnC Beacon 3 rev 7 2024-04-30
suricata ET HUNTING Request to 000webhostapp Domain with Minimal Headers rev 4 2024-04-30
suricata ET MALWARE Win32/Delf.TJJ Variant CnC Activity rev 4 2024-04-30
suricata ET MALWARE PurpleFox Backdoor/Rootkit Download Server Response M3 rev 4 2024-04-30
suricata ET INFO NSecSoft Remote Monitoring Update/Download Activity M1 rev 3 2024-04-30
suricata ET MALWARE Observed Buran Ransomware UA rev 4 2024-04-30
suricata ET MALWARE Infostealer.Jackpos Checkin 2 rev 7 2024-04-30
suricata ET MALWARE Win32/Satana Ransomware Checkin rev 5 2024-04-30
suricata ET MALWARE [ANY.RUN] LgoogLoader Retrieving Config File rev 3 2024-04-30
suricata ET INFO Minimal HTTP GET Request to rebrand .ly rev 3 2024-04-30
suricata ET HUNTING Possible External IP Check rev 2 2024-04-30
suricata ET MALWARE IIStealer Inbound Exfil Request M2 rev 3 2024-04-30
suricata ET MALWARE FaceBook IM & Web Driven Facebook Trojan Posting Data rev 8 2024-04-30
suricata ET MALWARE PlugX/Korplug CnC Activity rev 3 2024-04-30
suricata ET MALWARE Sharik/Smoke Loader Microsoft Connectivity check rev 6 2024-04-30
suricata ET MALWARE Possible Babar POST Request rev 5 2024-04-30
suricata ET MALWARE CNRarypt Ransomware CnC Activity rev 3 2024-04-30
suricata ET MALWARE MSIL/Lightning Stealer Exfil Activity rev 3 2024-04-30
suricata ET MALWARE Win32/Injector.BXEW Variant HTTP CnC Beacon 1 rev 6 2024-04-30
suricata ET MALWARE Win32.Rovnix.I Checkin rev 6 2024-04-30
suricata ET MALWARE ReflectiveGnome Download Activity rev 4 2024-04-30
suricata ET HUNTING SUSPICIOUS DOC Download from commonly abused file share site rev 6 2024-04-30
suricata ET MALWARE Win64/Agent.BP System Info Exfil rev 3 2024-04-30
suricata ET MALWARE TA450 Nagual CnC Activity rev 3 2024-04-30
suricata ET EXPLOIT Possible Google Cookie Token Manipulation Activity rev 3 2024-04-30
suricata ET MALWARE W32/Echmark/MarkiRAT CnC Activity M3 rev 3 2024-04-30
suricata ET MALWARE Win32/RecordBreaker - Library Request rev 3 2024-04-30
suricata ET HUNTING Request to .TK Domain with Minimal Headers rev 4 2024-04-30
suricata ET MALWARE TeleBots BCS-server CnC Beacon rev 5 2024-04-30
suricata ET HUNTING Request to .ML Domain with Minimal Headers rev 4 2024-04-30