Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE UsefulTyphon CnC Activity M1 rev 3 2024-04-21
suricata ET MALWARE FighterPOS CnC Beacon 1 rev 5 2024-04-21
suricata ET MALWARE Anuna PHP Backdoor Attempt rev 5 2024-04-21
suricata ET MALWARE SolarBot Plugin Download MessageBox rev 4 2024-04-20
suricata ET HUNTING Possible UPnP UUID Overflow Exploit Attempt from External Host - SUBSCRIBE/UNSUBSCRIBE rev 2 2024-04-20
suricata ET MALWARE Win32/Radonskra.B C2 Check-in rev 4 2024-04-20
suricata ET MALWARE L0rdix Stealer CnC Data Exfil rev 3 2024-04-20
suricata ET MALWARE Upatre Common URI Struct July 15 2014 rev 5 2024-04-20
suricata ET MALWARE Lemon_Duck Powershell - Install Tracking rev 3 2024-04-20
suricata ET MALWARE Trojan Generic - POST To gate.php with no referer rev 12 2024-04-20
suricata ET MALWARE Ransomware Win32/WinPlock.A Successfully Installed CnC Beacon rev 5 2024-04-20
suricata ET MALWARE APT/TransparentTribe CnC Checkin rev 2 2024-04-20
suricata ET MALWARE Win32/Geodo Checkin rev 12 2024-04-20
suricata ET MALWARE CoinVault POST M2 rev 4 2024-04-20
suricata ET MALWARE Win32/CollectorStealer CnC Exfil M2 rev 2 2024-04-20
suricata ET MALWARE Win32/Kryptik.FVVZ Variant CnC Checkin 2 rev 4 2024-04-20
suricata ET MALWARE DarkHotel Initial Beacon rev 4 2024-04-20
suricata ET MALWARE Backdoor.Elise CnC Beacon 1 M2 rev 12 2024-04-20
suricata ET MALWARE CoinVault CnC Beacon M2 rev 5 2024-04-20
suricata ET EXPLOIT Possible Magento Directory Traversal Attempt rev 4 2024-04-20
suricata ET INFO CNET TechTracker Software Manager request rev 5 2024-04-20
suricata ET MALWARE FighterPOS CnC Beacon 2 rev 5 2024-04-20
suricata ET MALWARE Ixeshe/Mecklow Checkin rev 13 2024-04-20
suricata ET MALWARE Evrial Stealer CnC Activity rev 3 2024-04-20
suricata ET MALWARE Generic Downloader Checkin - HTTP GET rev 9 2024-04-20
suricata ET MALWARE ELF/Kinsing Payload Request M2 rev 2 2024-04-20
suricata ET MALWARE BlackTech/PLEAD TSCookie CnC Checkin M1 rev 6 2024-04-20
suricata ET MALWARE SolarBot Plugin Download ComputerInfo rev 4 2024-04-20
suricata ET MALWARE VBulletin Backdoor CMD inbound rev 6 2024-04-20
suricata ET HUNTING HTTP Request with Double Cache-Control rev 4 2024-04-20
suricata ET PHISHING Successful Generic Email Account Phish 2019-12-10 rev 2 2024-04-20
suricata ET MALWARE Yayih.A Checkin rev 5 2024-04-20
suricata ET MALWARE DustySky CnC Beacon rev 7 2024-04-20
suricata ET PHISHING Possible Base64 Obfuscated Phishing Landing 2015-11-30 rev 8 2024-04-20
suricata ET MALWARE Ousaban Related Maldoc Activity rev 3 2024-04-20
suricata ET MALWARE FAKBEN Ransomware rev 3 2024-04-20
suricata ET MALWARE Ursnif Variant CnC Data Exfil rev 5 2024-04-20
suricata ET MALWARE MSIL/G2 Stealer/GravityRAT CnC Checkin rev 3 2024-04-20
suricata ET MALWARE Zbot download config - SET rev 4 2024-04-20
suricata ET MALWARE DiamondFox HTTP Post CnC Checkin M3 rev 4 2024-04-20