Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE CryptoWall CryptoWall 3.0 Check-in rev 5 2024-04-30
suricata ET MALWARE Likely Arid Viper APT Advtravel Campaign POST rev 8 2024-04-30
suricata ET ADWARE_PUP CoinSurf Proxy Client Registration rev 3 2024-04-30
suricata ET MALWARE VBS/TrojanDownloader.Agent.SEB Checkin rev 3 2024-04-30
suricata ET MALWARE Win32/Neutrino Checkin 2 rev 7 2024-04-30
suricata ET MALWARE Win32/SandCat CnC Checkin rev 3 2024-04-30
suricata ET MALWARE PunkeyPOS HTTP CnC Beacon 4 rev 6 2024-04-30
suricata ET MALWARE WildPressure/Milum CnC Activity rev 4 2024-04-30
suricata ET MALWARE Win32/RecordBreaker Checkin M2 rev 3 2024-04-30
suricata ET MALWARE Win32/Ymacco.AA67 CnC Activity rev 3 2024-04-30
suricata ET MALWARE Stealbit Variant Data Exfil M2 rev 7 2024-04-30
suricata ET HUNTING Request to .ML Domain with Minimal Headers rev 4 2024-04-30
suricata ET HUNTING Request to .TK Domain with Minimal Headers rev 4 2024-04-30
suricata ET EXPLOIT Possible Google Cookie Token Manipulation Activity rev 3 2024-04-30
suricata ET HUNTING Terse Request for .txt - Likely Hostile rev 3 2024-04-30
suricata ET MALWARE GCleaner Downloader Activity M5 rev 3 2024-04-30
suricata ET MALWARE Win64/Agent.BP System Info Exfil rev 3 2024-04-30
suricata ET MALWARE PunkeyPOS HTTP CnC Beacon 1 rev 6 2024-04-30
suricata ET MALWARE KeyLogger related to FindPOS CnC Beacon rev 5 2024-04-30
suricata ET MALWARE IIStealer Inbound Exfil Request rev 3 2024-04-30
suricata ET MALWARE Vawtrak/NeverQuest Posting Data rev 5 2024-04-30
suricata ET MALWARE Suspected Bumblebee Loader Activity rev 3 2024-04-30
suricata ET MALWARE X-Files Stealer CnC Exfil Activity M2 rev 3 2024-04-30
suricata ET ADWARE_PUP pdfspeedup Keep-Alive rev 3 2024-04-30
suricata ET MALWARE Win32/Agent.RDE Checkin rev 3 2024-04-30
suricata ET HUNTING Request to .TOP Domain with Minimal Headers rev 4 2024-04-30
suricata ET HUNTING Go-http-client POSTing IP Address and Username rev 3 2024-04-30
suricata ET ADWARE_PUP CoinSurf Proxy Client Login rev 3 2024-04-30
suricata ET MOBILE_MALWARE Kimsuky AppleSeed CnC Checkin M2 rev 3 2024-04-30
suricata ET ADWARE_PUP PUP TheSZ AutoUpdate CnC Beacon rev 7 2024-04-30
suricata ET MALWARE Likely Arid Viper APT Advtravel Campaign GET Keepalive rev 10 2024-04-30
suricata ET MALWARE NOBELIUM - Cobalt Strike Malleable Profile M2 rev 3 2024-04-30
snort ET TROJAN Win32/MarioLoader Login Panel rev 1 2024-04-29
snort ET CURRENT_EVENTS Fiesta EK Flash Exploit Apr 23 2015 rev 3 2024-04-29
snort ET TROJAN Bookworm CnC Beacon rev 2 2024-04-29
snort ET TROJAN Backdoor.Elise CnC Beacon 2 rev 4 2024-04-29
snort ET TROJAN Bookworm CnC Beacon 2 rev 3 2024-04-29
snort ET TROJAN Quant Loader Download Request rev 3 2024-04-29
snort ET TROJAN Win32.Sality-GR Checkin 2 rev 2 2024-04-29
snort ET TROJAN Possible Royal Road Payload Retrieval Attempt rev 1 2024-04-29