Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MOBILE_MALWARE Android.KorBanker Fake Banking App Install CnC Beacon rev 6 2024-04-21
suricata ET WEB_SPECIFIC_APPS Possible VBulletin Unauthorized Admin Account Creation rev 5 2024-04-21
suricata ET EXPLOIT HP Enterprise VAN SDN Controller Upload Backdoor rev 5 2024-04-21
suricata ET MOBILE_MALWARE Android/Locker.B Checkin 2 rev 6 2024-04-21
suricata ET MALWARE MUROFET/Licat Trojan rev 12 2024-04-21
suricata ET MALWARE Suspected Tunna Proxy M3 rev 3 2024-04-21
suricata ET MALWARE Possible Win32/Dimegup.A Downloading Image Common URI Struct rev 8 2024-04-21
suricata ET MALWARE W32/Hesperus.Banker Nlog.php Variant Sending Data To CnC rev 7 2024-04-21
suricata ET MALWARE Arid Viper APT Transmitting Date rev 5 2024-04-21
suricata ET MALWARE Cobalt Strike Exfiltration rev 4 2024-04-21
suricata ET SCAN HP Enterprise VAN SDN Controller rev 4 2024-04-21
suricata ET MALWARE Plead TSCookie CnC Checkin M3 rev 3 2024-04-21
suricata ET MALWARE Possible Duqu 2.0 Request rev 6 2024-04-21
suricata ET MALWARE BlackEnergy v2 POST Request rev 5 2024-04-21
suricata ET MALWARE Suspected Tunna Proxy M4 rev 3 2024-04-21
suricata ET MALWARE Gozi/Ursnif/Papras Connectivity Check rev 7 2024-04-21
suricata ET MALWARE Win32/ProtonBot Stealer Activity rev 4 2024-04-21
suricata ET MALWARE HTA.BabyShark HTTP Exfil rev 4 2024-04-21
suricata ET ADWARE_PUP PUP Win32/DownloadAssistant.A Checkin rev 8 2024-04-21
suricata ET MALWARE Win32/Laturo Stealer CnC Checkin rev 4 2024-04-21
suricata ET ADWARE_PUP Loadmoney.A Checkin 8 rev 6 2024-04-21
suricata ET MALWARE Win32/Teslacrypt Ransomware HTTP CnC Beacon M1 rev 8 2024-04-21
suricata ET MALWARE Win32.YordanyanActiveAgent CnC Reporting rev 5 2024-04-21
suricata ET MALWARE LYCEUM MSIL/DanBot CnC Checkin rev 3 2024-04-21
suricata ET MALWARE Emotet CnC Beacon rev 5 2024-04-21
suricata ET MALWARE UsefulTyphon CnC Activity M1 rev 3 2024-04-21
suricata ET MALWARE FighterPOS CnC Beacon 1 rev 5 2024-04-21
suricata ET MALWARE Anuna PHP Backdoor Attempt rev 5 2024-04-21
suricata ET MALWARE Win32/Alpha Stealer v1.5 PWS Exfil via HTTP rev 4 2024-04-21
suricata ET MALWARE XDUpload Uploading Files rev 2 2024-04-21
suricata ET WEB_SERVER FOX-SRT - Backdoor - CryptoPHP Shell C2 POST rev 5 2024-04-21
suricata ET MALWARE Win32/Poweliks.A Checkin 2 rev 5 2024-04-21
suricata ET MALWARE Operation Cobra Venom WSF Stage 1 - File Decode Completed rev 4 2024-04-21
suricata ET MALWARE D1onis Stealer Sending Data to CnC rev 2 2024-04-21
suricata ET ADWARE_PUP PUP Win32/Conduit.SearchProtect.O CnC Beacon rev 5 2024-04-21
suricata ET MALWARE Suspected Tunna Proxy M1 rev 3 2024-04-21
suricata ET MALWARE Platinum APT Activity rev 3 2024-04-21
suricata ET ADWARE_PUP W32/iBryte.Adware Installer Download rev 8 2024-04-21
suricata ET MALWARE Arid Viper APT File information rev 5 2024-04-21
suricata ET MALWARE Win32/Spy.Tuscas rev 5 2024-04-21