Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Win32/Filecoder.OJC CnC Checkin rev 2 2024-04-26
suricata ET MALWARE Win32.ClipBanker.uhn Exfil rev 2 2024-04-26
suricata ET MALWARE Win32/Ymacco.AA60 Checkin rev 2 2024-04-26
suricata ET HUNTING Possible Snake Header in HTTP Request rev 2 2024-04-26
suricata ET MALWARE Suspected Muggle Stealer Activity M1 rev 2 2024-04-26
suricata ET MALWARE Gamut Spambot Checkin rev 9 2024-04-26
suricata ET MALWARE Win32/PSW.LdPinch CnC Checkin rev 2 2024-04-26
suricata ET MALWARE Win32/Wacapew.C!ml Checkin rev 2 2024-04-26
suricata ET MALWARE Havoc Framework CnC Response rev 2 2024-04-26
suricata ET PHISHING HiYu - Request for Victim Enrichment rev 2 2024-04-26
suricata ET MALWARE ReverseRat 3.0 CnC Checkin M1 rev 2 2024-04-26
suricata ET MALWARE DeltaStealer CnC Checkin rev 2 2024-04-26
suricata ET MALWARE MageCart Skimmer Header Observed Outbound rev 2 2024-04-26
suricata ET MALWARE ReverseRat 3.0 CnC Checkin M2 rev 2 2024-04-26
suricata ET PHISHING Successful OWA Phish 2022-07-11 rev 2 2024-04-26
suricata ET MALWARE Win64/Agent.BP Checkin rev 2 2024-04-26
suricata ET MALWARE Suspected Gamaredon Related Maldoc Activity M2 rev 2 2024-04-26
suricata ET MALWARE [ANY.RUN] RCRU64 Ransomware Variant CnC Activity rev 2 2024-04-26
suricata ET MALWARE Win32/Shrine.A CnC Checkin rev 2 2024-04-26
suricata ET ADWARE_PUP DriverPack Update Checkin rev 2 2024-04-26
suricata ET GAMES Multiple Game Cheat Application Related Activity rev 2 2024-04-26
suricata ET MALWARE O97M/Sadoca.C!ml Checkin rev 2 2024-04-26
suricata ET MALWARE MuddyWater APT Related Maldoc Checkin M1 rev 4 2024-04-26
suricata ET HUNTING Terse Request for WordPress Site ending in all digits rev 2 2024-04-26
suricata ET MALWARE 000Stealer Data Exfiltration M1 rev 3 2024-04-26
suricata ET MALWARE MSIL/Filecoder.EK CnC Checkin rev 2 2024-04-26
suricata ET EXPLOIT Shenzhen TVT DVR/NVR/IPC Stack Overflow in Base64 Authorization Mechanism M1 rev 2 2024-04-26
suricata ET HUNTING Terse Unencrypted Request for Google - Likely Connectivity Check rev 3 2024-04-26
suricata ET MALWARE MSIL/Spy.Agent.CSS Exfil rev 2 2024-04-26
suricata ET PHISHING Nedbank Phishing Landing Page 2022-06-22 rev 2 2024-04-26
suricata ET PHISHING Tech Support Phone Scam Landing 2023-04-17 rev 2 2024-04-26
suricata ET MALWARE EICAR File Sent With X-Powered By Kaspersky Labs 2022-11-03 rev 2 2024-04-26
suricata ET MALWARE VectorStealer Data Exfil via Telegram rev 2 2024-04-26
suricata ET MALWARE Win32/RM3Loader Server Response rev 2 2024-04-26
suricata ET MALWARE Win32/WarHawk Checkin Activity rev 2 2024-04-26
suricata ET MALWARE IIS Backdoor CnC Command Inbound rev 2 2024-04-26
suricata ET INFO Possible Rogue LoJack Asset Tracking Agent rev 6 2024-04-26
suricata ET ADWARE_PUP Win32/SuperDiag PUP CnC Activity rev 2 2024-04-26
suricata ET WEB_SERVER LEMURLOOT WebShell Interaction Header - X-siLock-Step1 -1 Data Exfil Request - Observed in MOVEit File Transfer - INBOUND rev 2 2024-04-26
suricata ET EXPLOIT Shenzhen TVT DVR/NVR/IPC Hardcoded WebUI Login Attempt M2 rev 2 2024-04-26