Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Poweliks Clickfraud CnC M2 rev 6 2024-04-28
suricata ET MALWARE Win32/Spy.Banker.AAXV Retrieving key from Pinterest rev 6 2024-04-28
suricata ET USER_AGENTS FOCA User-Agent rev 8 2024-04-28
suricata ET ADWARE_PUP GMUnpackerInstaller.A Checkin rev 7 2024-04-28
suricata ET MALWARE Ursnif Variant CnC Beacon 3 rev 5 2024-04-28
suricata ET MALWARE Sakula/Mivast RAT CnC Beacon 3 rev 6 2024-04-28
suricata ET MALWARE Win32/Tobfy.S rev 8 2024-04-28
suricata ET MALWARE Quant Loader Download Request rev 7 2024-04-28
suricata ET MALWARE Cryptojoker Checkin rev 5 2024-04-28
suricata ET MALWARE Echelon/DarkStealer Variant CnC Exfil M2 rev 3 2024-04-28
suricata ET MALWARE W32/Dridex Binary Download Mar 23 2016 rev 7 2024-04-28
suricata ET ADWARE_PUP Win32/Atshz.A Checkin rev 7 2024-04-28
suricata ET MALWARE Vawtrak/NeverQuest - Post Data Form 01 rev 6 2024-04-28
suricata ET MALWARE TA421 Wineloader CnC Checkin M2 rev 2 2024-04-28
suricata ET MALWARE vSkimmer.PoS Checkin rev 8 2024-04-28
suricata ET MALWARE MalDoc Retrieving Payload March 30 2017 rev 6 2024-04-28
suricata ET MALWARE MS_D0wnl0ad3r Checkin rev 5 2024-04-28
suricata ET MALWARE Win32/Reconyc.equo Checkin rev 7 2024-04-28
suricata ET MALWARE Backdoor.Elise CnC Beacon 3 M1 rev 7 2024-04-28
suricata ET MALWARE STRRAT Requesting License Check rev 3 2024-04-28
suricata ET MALWARE Gamarue/Andromeda Downloading Payload rev 5 2024-04-28
suricata ET MALWARE Win32/BanloadDownloader.XZY Retrieving Payload rev 6 2024-04-28
suricata ET EXPLOIT_KIT Possible Evil Redirector Leading to EK Nov 09 2015 M2 rev 10 2024-04-28
suricata ET MALWARE STRRAT Initial HTTP Activity rev 3 2024-04-28
suricata ET PHISHING Weebly Phishing Landing Observed 2015-11-10 rev 5 2024-04-28
suricata ET MALWARE Gamaredon File Stealer POST rev 5 2024-04-28
suricata ET MALWARE Backdoor.Elise CnC Beacon 3 M2 rev 9 2024-04-28
suricata ET MALWARE Sakula/Mivast RAT CnC Beacon 2 rev 6 2024-04-28
suricata ET INFO OneNote Notebook Downloaded via Powershell rev 4 2024-04-28
suricata ET MALWARE Sakula/Mivast RAT CnC Beacon 6 rev 6 2024-04-28
suricata ET MALWARE Win32/Travnet.A Checkin rev 9 2024-04-28
suricata ET MALWARE Bookworm CnC Beacon 2 rev 6 2024-04-28
suricata ET MALWARE Win32/TrickBot maserv Module CnC Activity rev 3 2024-04-28
suricata ET INFO Hola VPN Activity - X-Hola-* Headers rev 4 2024-04-28
suricata ET MALWARE Win32.Sality-GR Checkin 2 rev 6 2024-04-28
suricata ET MALWARE Win32.SpyEyes.bllw CnC Exfil rev 3 2024-04-28
suricata ET MALWARE Cobalt Strike Malleable C2 Webbug Profile rev 7 2024-04-28
suricata ET MOBILE_MALWARE iOS/Xsser checking library version rev 5 2024-04-28
suricata ET MALWARE Sage Ransomware Checkin rev 6 2024-04-28
suricata ET MALWARE Bookworm CnC Beacon rev 6 2024-04-28