Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET INFO XenArmor Password Recovery License Check rev 3 2024-04-29
suricata ET MALWARE Suspected Glupteba Download rev 3 2024-04-29
suricata ET MALWARE Win32/Vodkagats Loader Requesting Payload rev 4 2024-04-29
suricata ET ADWARE_PUP TopTools PUP Install Activity rev 6 2024-04-29
suricata ET MALWARE JS/Nemucod.M.gen requesting EXE payload 2015-11-02 rev 6 2024-04-29
suricata ET MALWARE Win32/RCAP CnC Checkin rev 5 2024-04-29
suricata ET MALWARE Vidar/Arkei/Megumin/Oski Stealer Data Exfil rev 4 2024-04-29
suricata ET MALWARE Worm.Win32.Balucaf.A Checkin rev 8 2024-04-29
suricata ET MALWARE [PTsecurity] TR/Spy.Banker.agdtw Checkin rev 4 2024-04-29
suricata ET MALWARE NORTHSTAR Client Data POST rev 3 2024-04-29
suricata ET MALWARE Win32/7ev3n Ransomware Initial Checkin rev 5 2024-04-29
suricata ET MALWARE JS/Nemucod requesting EXE payload 2016-01-28 rev 10 2024-04-29
suricata ET MALWARE Win32/Kryptik.HMCH Dropper User-Agent M3 rev 3 2024-04-29
suricata ET MALWARE Win32/TrickBot Anchor Variant Style External IP Check rev 3 2024-04-29
suricata ET MALWARE Request for Malicious .dat File rev 3 2024-04-29
suricata ET MALWARE AlphaCrypt CnC Beacon 5 rev 6 2024-04-29
suricata ET MALWARE Win32/Nemty Ransomware Style Geo IP Check M1 rev 5 2024-04-29
suricata ET MALWARE W32/Alina.POS-Trojan Checkin rev 6 2024-04-29
suricata ET WEB_SPECIFIC_APPS Ruijie Network Switches Unauthenticated Command Execution rev 2 2024-04-29
suricata ET MALWARE Win32/MarioLoader Login Panel rev 1 2024-04-29
suricata ET MALWARE Cloud Atlas CnC Beacon rev 6 2024-04-29
suricata ET MOBILE_MALWARE Android Vultr Checkin rev 5 2024-04-29
suricata ET MALWARE Sn0wsLogger CnC Exfil M1 rev 4 2024-04-29
sigma Use Icacls to Hide File to Everyone test 2024-04-29
suricata ET ADWARE_PUP Win32/Atshz.A Checkin rev 7 2024-04-28
suricata ET MOBILE_MALWARE Android/Koler.C Checkin rev 10 2024-04-28
suricata ET MALWARE ELF/RedXOR CnC Response rev 3 2024-04-28
suricata ET MALWARE Databack CnC rev 6 2024-04-28
suricata ET MALWARE GlitchPOS CnC Checkin rev 6 2024-04-28
suricata ET ADWARE_PUP ProxyGearPro Proxy Tool PUA rev 5 2024-04-28
suricata ET INFO Hola VPN Activity - X-Hola-* Headers rev 4 2024-04-28
suricata ET EXPLOIT_KIT Possible Evil Redirector Leading to EK Nov 09 2015 M1 rev 6 2024-04-28
suricata ET MALWARE Sakula/Mivast RAT CnC Beacon 6 rev 6 2024-04-28
suricata ET WEB_CLIENT Tech Support Phone Scam Landing M1 Jun 29 2016 rev 7 2024-04-28
suricata ET MALWARE Cobalt Strike Malleable C2 Webbug Profile rev 7 2024-04-28
suricata ET MALWARE Gamarue/Andromeda Downloading Payload rev 5 2024-04-28
suricata ET EXPLOIT_KIT Fiesta EK Flash Exploit Apr 23 2015 rev 6 2024-04-28
suricata ET MALWARE Win32/Neutrino Checkin rev 9 2024-04-28
suricata ET ADWARE_PUP PUP.GigaClicks Checkin rev 6 2024-04-28
suricata ET MALWARE Sisproc update rev 8 2024-04-28