Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET ADWARE_PUP SoftwareTracking Site - Install Report rev 2 2024-04-20
suricata ET MALWARE Evrial Stealer CnC Activity rev 3 2024-04-20
suricata ET MALWARE Likely Malicious Windows SCT Download MSXMLHTTP M3 rev 6 2024-04-20
suricata ET MALWARE JS/Ostap CnC Activity rev 2 2024-04-20
suricata ET MALWARE FRat WebSocket Request M1 rev 3 2024-04-20
suricata ET MALWARE Win32/Fireball Activity rev 4 2024-04-20
suricata ET MALWARE Known Malicious Expires Header Seen In Malicious JavaScript Downloader Campaign rev 4 2024-04-20
suricata ET MALWARE Ransomware Locky CnC Beacon rev 8 2024-04-20
suricata ET MALWARE WooSIP Downloader CnC WriteMetadataOnServer rev 4 2024-04-20
suricata ET MALWARE Patchwork APT CnC Beacon 2 rev 4 2024-04-20
suricata ET INFO Mattermost API Usage rev 3 2024-04-20
suricata ET MALWARE DarkHotel Downloader CnC Beacon 2 rev 4 2024-04-20
suricata ET MALWARE MegalodonHTTP CnC Checkin rev 3 2024-04-20
suricata ET MALWARE CoreDn CnC Checkin M2 rev 3 2024-04-20
suricata ET MALWARE AZORult Variant.4 Checkin M2 rev 4 2024-04-20
suricata ET MALWARE DiamondFox HTTP Post CnC Checkin M3 rev 4 2024-04-20
suricata ET MALWARE FAKBEN Ransomware rev 3 2024-04-20
suricata ET ADWARE_PUP OSX/Bundalore Loader Activity rev 2 2024-04-20
suricata ET MALWARE Win32/BlackNET CnC Keep-Alive rev 3 2024-04-20
suricata ET MALWARE Ursnif Variant CnC Data Exfil rev 5 2024-04-20
suricata ET MALWARE Yayih.A Checkin rev 5 2024-04-20
suricata ET HUNTING Suspicious GET To gate.php with no Referer rev 2 2024-04-20
suricata ET MALWARE Sakula/Mivast RAT CnC Beacon 1 rev 7 2024-04-20
suricata ET MALWARE Zbot download config - SET rev 4 2024-04-20
suricata ET MALWARE Red October/Win32.Digitalia Checkin cgi-bin/nt/sk rev 5 2024-04-20
suricata ET MALWARE Vawtrak/NeverQuest Posting Data rev 4 2024-04-20
suricata ET MALWARE VBulletin Backdoor CMD inbound rev 6 2024-04-20
suricata ET MALWARE JS/Nemucod requesting EXE payload 2016-03-31 rev 5 2024-04-20
suricata ET MALWARE Win32/Unk Downloader CnC Activity rev 4 2024-04-20
suricata ET MALWARE Win32/ViSystem CnC Checkin rev 3 2024-04-20
suricata ET MALWARE MalDoc Retrieving Possible Ostap Payload rev 2 2024-04-20
suricata ET MALWARE Win32/RocketX Stealer CnC Exfil rev 2 2024-04-20
suricata ET MALWARE Chthonic Checkin rev 10 2024-04-20
suricata ET MALWARE Suspected Gamaredon Downloader Activity rev 3 2024-04-20
suricata ET MALWARE ProxyBox - HTTP CnC - getiplist.php rev 4 2024-04-20
suricata ET MALWARE nspps Backdoor CnC Activity rev 2 2024-04-20
suricata ET WEB_SPECIFIC_APPS Joomla GoogleMaps Plugin Open Proxy Access rev 4 2024-04-20
suricata ET MALWARE Fake Variation of Mozilla 4.0 - Likely Trojan rev 13 2024-04-20
suricata ET MALWARE MSIL/Agent.BIC Variant CnC Checkin rev 3 2024-04-20
suricata ET MALWARE Nemty Ransomware CnC Checkin rev 2 2024-04-20