Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Arid Viper APT Checkin 2 rev 5 2024-04-21
suricata ET MALWARE MUROFET/Licat Trojan rev 12 2024-04-21
suricata ET MALWARE ZeroLocker Activity rev 5 2024-04-21
suricata ET MALWARE Neverquest/Vawtrak Posting Data rev 6 2024-04-21
suricata ET MALWARE Win32/Alpha Stealer v1.5 PWS Exfil via HTTP rev 4 2024-04-21
suricata ET MALWARE W32/Adrom.Backdoor CnC Beacon rev 5 2024-04-21
suricata ET MALWARE Tinba Checkin 3 rev 7 2024-04-21
suricata ET MALWARE TrueBot/Silence.Downloader CnC Checkin rev 5 2024-04-21
suricata ET MALWARE UsefulTyphon CnC Activity M2 rev 3 2024-04-21
suricata ET MALWARE Win32/Spy.KeyLogger.ODN Checkin rev 6 2024-04-21
suricata ET MALWARE ZeroLocker Downloading Config rev 5 2024-04-21
suricata ET MALWARE Arid Viper APT Checking filename rev 5 2024-04-21
suricata ET MALWARE FakeAV Variant CnC Beacon rev 5 2024-04-21
suricata ET MALWARE Observed ProtonBot User-Agent rev 3 2024-04-21
suricata ET MALWARE Neverquest Request URI Struct rev 6 2024-04-21
suricata ET MALWARE MSIL.L4L Stealer Screenshot Exfiltration rev 3 2024-04-21
suricata ET MALWARE Plead TSCookie CnC Checkin M1 rev 3 2024-04-21
suricata ET MALWARE MWI Maldoc Load Payload rev 6 2024-04-21
suricata ET MALWARE [TGI] Py.Machete HTTP CnC Exfil rev 6 2024-04-21
suricata ET MALWARE Platinum APT Activity rev 3 2024-04-21
suricata ET MALWARE Dridex DL Pattern Feb 18 2016 rev 7 2024-04-21
suricata ET MALWARE MyKings Bootloader Variant Requesting Payload M2 rev 4 2024-04-21
suricata ET MALWARE Sednit/APT28/Sofacy Delphocy CnC Beacon rev 5 2024-04-21
suricata ET ADWARE_PUP Win32/DealPly Checkin rev 6 2024-04-21
suricata ET SCAN Goatzapszu Header from unknown Scanning Tool rev 5 2024-04-21
suricata ET MALWARE TURLA APT CnC Activity rev 2 2024-04-21
suricata ET MALWARE IcedID WebSocket Request rev 6 2024-04-21
suricata ET MALWARE TransparentTribe APT Maldoc CnC Checkin rev 5 2024-04-21
suricata ET MALWARE Operation Cobra Venom WSF Stage 1 - File Decode Completed rev 4 2024-04-21
suricata ET MALWARE D1onis Stealer Sending Data to CnC rev 2 2024-04-21
suricata ET MALWARE APT33/CharmingKitten JS/HTA Stage 1 CnC Checkin rev 4 2024-04-21
suricata ET MALWARE XDUpload Uploading Files rev 2 2024-04-21
suricata ET MALWARE Ursnif Checkin rev 6 2024-04-21
suricata ET MALWARE W32/Bapy.Downloader PE Download Request rev 5 2024-04-21
suricata ET WEB_SERVER FOX-SRT - Backdoor - CryptoPHP Shell C2 POST rev 5 2024-04-21
suricata ET MALWARE Possible Evil Macro Downloading Trojan Dec 16 2015 Post to EXE rev 5 2024-04-21
suricata ET MALWARE Win32/Poweliks.A Checkin 2 rev 5 2024-04-21
suricata ET MALWARE Unk.VBSLoader Retrieving Payload rev 3 2024-04-21
suricata ET MALWARE Suspicious Fake Opera 10 User-Agent rev 7 2024-04-21
suricata ET MALWARE BlackTech/PLEAD TSCookie CnC Checkin M2 rev 4 2024-04-21