Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Medfos/Midhos Checkin rev 7 2024-04-28
suricata ET ADWARE_PUP Win32/Atshz.A Checkin rev 7 2024-04-28
suricata ET MALWARE Nitlove POS CnC rev 6 2024-04-28
suricata ET WEB_CLIENT Tech Support Phone Scam Landing M1 Jan 20 2017 rev 5 2024-04-28
suricata ET MALWARE Sakula/Mivast RAT CnC Beacon 6 rev 6 2024-04-28
suricata ET MALWARE Cobalt Strike Malleable C2 Webbug Profile rev 7 2024-04-28
suricata ET PHISHING Google Drive Phishing Landing 2015-11-17 rev 5 2024-04-28
suricata ET MALWARE Win32/TrickBot maserv Module CnC Activity rev 3 2024-04-28
suricata ET HUNTING Request for EXE via WinHTTP M2 rev 3 2024-04-28
suricata ET MALWARE DDG Botnet CnC Slave POST rev 3 2024-04-28
suricata ET MALWARE Win32.Sality-GR Checkin 2 rev 6 2024-04-28
suricata ET MALWARE Win32/Travnet.A Checkin rev 9 2024-04-28
suricata ET EXPLOIT Eir D1000 Modem CWMP Exploit Retrieving Wifi Key rev 7 2024-04-28
suricata ET MALWARE PunkeyPOS HTTP CnC Beacon Fake UA rev 6 2024-04-28
suricata ET MALWARE Echelon/DarkStealer Variant CnC Exfil M2 rev 3 2024-04-28
suricata ET MALWARE Win32/Reconyc.equo Checkin rev 7 2024-04-28
suricata ET MALWARE Backdoor.Elise CnC Beacon 3 M1 rev 7 2024-04-28
suricata ET MALWARE Cobalt Strike Malleable C2 Amazon Profile rev 6 2024-04-28
suricata ET MALWARE Bookworm CnC Beacon rev 6 2024-04-28
suricata ET MALWARE Win32/Zeprox.B Checkin rev 10 2024-04-28
suricata ET MALWARE TA421 Wineloader CnC Checkin M2 rev 2 2024-04-28
suricata ET MALWARE JS/HTA Downloader Behavior M3 rev 8 2024-04-28
suricata ET MALWARE MS_D0wnl0ad3r Checkin rev 5 2024-04-28
suricata ET MOBILE_MALWARE iOS/Xsser checking library version rev 5 2024-04-28
suricata ET MALWARE Sisproc update rev 8 2024-04-28
suricata ET MALWARE ZeroAccess P2P Module v6 Reporting rev 5 2024-04-28
suricata ET MALWARE Sage Ransomware Checkin rev 6 2024-04-28
suricata ET MALWARE Bitcoin variant Checkin rev 6 2024-04-28
suricata ET EXPLOIT_KIT Fiesta EK Flash Exploit Apr 23 2015 rev 6 2024-04-28
suricata ET MALWARE Citadel Activity POST rev 7 2024-04-28
suricata ET MALWARE Sednit/AZZY Checkin rev 7 2024-04-28
suricata ET MALWARE W32/Dridex Binary Download Mar 23 2016 rev 7 2024-04-28
suricata ET MALWARE Win32/Neutrino Checkin rev 9 2024-04-28
suricata ET ADWARE_PUP PUP.GigaClicks Checkin rev 6 2024-04-28
suricata ET MOBILE_MALWARE Android.Stealthgenie Checkin rev 7 2024-04-28
suricata ET MOBILE_MALWARE Trojan-Dropper.AndroidOS.Hqwar.hf Checkin rev 3 2024-04-28
suricata ET MALWARE JS/Nemucod requesting EXE payload 2015-12-01 rev 8 2024-04-28
suricata ET EXPLOIT_KIT Fiesta EK SilverLight Exploit Apr 23 2015 rev 7 2024-04-28
suricata ET MALWARE Poweliks Clickfraud CnC M2 rev 6 2024-04-28
suricata ET EXPLOIT Possible NGINX Reference LDAP Query Injection Attack rev 4 2024-04-28