Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Quant Loader Download Request rev 3 2024-04-29
suricata ET MALWARE Emotet Wifi Bruter Module Checkin rev 4 2024-04-29
suricata ET MALWARE RocketMan Win32/Drun rev 6 2024-04-29
suricata ET MALWARE Win32/Nemty Ransomware Style Geo IP Check M2 rev 5 2024-04-29
suricata ET WEB_SPECIFIC_APPS Ruijie Network Switches Unauthenticated Command Execution rev 2 2024-04-29
suricata ET MALWARE Win32/CollectorStealer - Uploading System Information rev 4 2024-04-29
suricata ET HUNTING SUSPICIOUS EXE Download from Google Common Data Storage with no Referer rev 6 2024-04-29
suricata ET MALWARE Jupyter Stealer Reporting System Information M2 rev 5 2024-04-29
suricata ET MALWARE FOX-SRT ShimRatReporter check-in rev 6 2024-04-29
suricata ET MALWARE [PTsecurity] TR/Spy.Banker.agdtw Checkin rev 4 2024-04-29
suricata ET WEB_SERVER SLIGHTPULSE WebShell Access Inbound M1 rev 3 2024-04-29
suricata ET MALWARE Win32/MailerBot CnC Activity rev 3 2024-04-29
suricata ET MALWARE Worm.Win32.Balucaf.A Checkin rev 8 2024-04-29
suricata ET HUNTING EXE Downloaded from Github rev 3 2024-04-29
suricata ET MALWARE JS/Nemucod requesting EXE payload 2016-01-28 rev 10 2024-04-29
suricata ET MALWARE Possible Royal Road Payload Retrieval Attempt rev 1 2024-04-29
suricata ET MALWARE JS/Nemucod.M.gen requesting PDF payload 2015-11-02 rev 6 2024-04-29
suricata ET MALWARE Sn0wsLogger CnC Exfil M1 rev 4 2024-04-29
suricata ET MOBILE_MALWARE Android Vultr Checkin rev 5 2024-04-29
suricata ET MALWARE Win32/MarioLoader Login Panel rev 1 2024-04-29
suricata ET MALWARE Buran Ransomware Activity M1 rev 5 2024-04-29
suricata ET MALWARE Win32/Nemty Ransomware Style Geo IP Check M1 rev 5 2024-04-29
suricata ET MALWARE Cloud Atlas CnC Beacon rev 6 2024-04-29
suricata ET MALWARE W32/Alina.POS-Trojan Checkin rev 6 2024-04-29
suricata ET MALWARE Win32/Kryptik.HMCH Dropper User-Agent M2 rev 3 2024-04-29
suricata ET ADWARE_PUP Win32/Adware.Adposhel.A Checkin M6 rev 5 2024-04-29
suricata ET MALWARE Win32/Kryptik.HMCH Dropper User-Agent M4 rev 3 2024-04-29
suricata ET MALWARE Sn0wsLogger CnC Exfil M2 rev 4 2024-04-29
suricata ET MALWARE GCleaner Related Downloader User-Agent rev 4 2024-04-29
suricata ET MALWARE JS/Nemucod.M.gen requesting EXE payload 2015-11-02 rev 6 2024-04-29
suricata ET MALWARE Suspected Glupteba Download rev 3 2024-04-29
suricata ET MALWARE MalDoc Requesting Payload 2020-04-21 rev 3 2024-04-29
suricata ET MALWARE FinSpy Related WinRAR Activity rev 3 2024-04-29
suricata ET MALWARE Casbaneiro CnC Host Checkin M2 rev 4 2024-04-29
suricata ET MALWARE Win32/PlagueBot User-Agent rev 3 2024-04-29
suricata ET MALWARE Win32/Ispen BADNEWS CnC Beacon rev 6 2024-04-29
suricata ET MALWARE [PTsecurity] Kuriyama Loader Checkin rev 8 2024-04-29
suricata ET MALWARE Win32/Infostealer.Snifula File Upload rev 5 2024-04-29
suricata ET MALWARE FinSpy Related Flash Installer Activity rev 3 2024-04-29
suricata ET MALWARE Win32/Vodkagats Loader Requesting Payload rev 4 2024-04-29