Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE BlackTech/PLEAD TSCookie CnC Checkin M1 rev 6 2024-04-20
suricata ET MALWARE Kuluoz Activity rev 6 2024-04-20
suricata ET ADWARE_PUP SoftwareTracking Site - Install Report rev 2 2024-04-20
suricata ET MALWARE Ddex Loader Check-in rev 4 2024-04-20
suricata ET MALWARE Likely Malicious Windows SCT Download MSXMLHTTP M3 rev 6 2024-04-20
suricata ET MALWARE Win32/Fireball Activity rev 4 2024-04-20
suricata ET INFO GET Minimal HTTP Headers Flowbit Set rev 5 2024-04-20
suricata ET MALWARE Win32/TrojanDownloader.Delf.BXC CnC Beacon rev 4 2024-04-20
suricata ET MALWARE Suspected Glupteba Download rev 2 2024-04-20
suricata ET MALWARE OSX/Flashback.K/I User-Agent rev 6 2024-04-20
suricata ET MALWARE MSIL.Kraken.v2 HTTP Pattern rev 4 2024-04-20
suricata ET MALWARE W32/TrojanSpy.MSIL Set Done Day CnC Beacon rev 4 2024-04-20
suricata ET MALWARE Win32/Rarog Stealer CnC Checkin rev 2 2024-04-20
suricata ET MALWARE ELF/Kinsing Payload Request M2 rev 2 2024-04-20
suricata ET EXPLOIT HP Enterprise VAN SDN Controller Install Backdoor rev 4 2024-04-20
suricata ET MALWARE W32/Citadel.Arx Variant CnC Beacon 1 rev 4 2024-04-20
suricata ET MALWARE Sharik/Smoke Loader Adobe Connectivity Check 2 rev 5 2024-04-20
suricata ET MALWARE Win32/Geodo Checkin rev 12 2024-04-20
suricata ET MALWARE Generic -POST To file.php w/Extended ASCII Characters rev 11 2024-04-20
suricata ET MALWARE Hangover related campaign Response rev 6 2024-04-20
suricata ET MALWARE Evrial Stealer Retrieving CnC Information rev 3 2024-04-20
suricata ET MALWARE Red October/Win32.Digitalia Checkin cgi-bin/dllhost/ac rev 8 2024-04-20
suricata ET MALWARE Razy Variant Checkin rev 12 2024-04-20
suricata ET MALWARE FRat WebSocket Request M1 rev 3 2024-04-20
suricata ET HUNTING Possible UPnP UUID Overflow Exploit Attempt from External Host - SUBSCRIBE/UNSUBSCRIBE rev 2 2024-04-20
suricata ET EXPLOIT Possible Magento Directory Traversal Attempt rev 4 2024-04-20
suricata ET MALWARE VBS.ARS Checkin rev 4 2024-04-20
suricata ET MALWARE JS/Ostap CnC Activity rev 2 2024-04-20
suricata ET MOBILE_MALWARE Adware.Adwo.A rev 5 2024-04-20
suricata ET MALWARE SA Banker Checkin rev 7 2024-04-20
suricata ET MALWARE WooSIP Downloader CnC DeleteFileOnServer rev 4 2024-04-20
suricata ET MALWARE MegalodonHTTP CnC Checkin rev 3 2024-04-20
suricata ET INFO Mattermost API Usage rev 3 2024-04-20
suricata ET MALWARE Win32/TrojanDownloader.Delf.BVP Win32/BioData CnC Beacon rev 5 2024-04-20
suricata ET MALWARE WooSIP Downloader CnC WriteMetadataOnServer rev 4 2024-04-20
suricata ET MALWARE CoreDn CnC Checkin M2 rev 3 2024-04-20
suricata ET MALWARE VikroStealer Retrieving Config rev 2 2024-04-20
suricata ET MALWARE MSIL/NewHT Ransomware CnC Checkin rev 4 2024-04-20
suricata ET MALWARE VikroStealer CnC Exfil rev 2 2024-04-20
suricata ET MALWARE Sharik/Smoke Loader Java Connectivity Check rev 5 2024-04-20