Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Win32/RisePro CnC Server Response M4 rev 4 2024-04-18
suricata ET PHISHING Successful Apple iCloud Phish May 08 2017 rev 5 2024-04-18
suricata ET MALWARE W32/Kazy.325252 Variant CnC Beacon 1 rev 6 2024-04-18
sigma Gatekeeper Bypass via Xattr test 2024-04-18
sigma Cisco Duo Successful MFA Authentication Via Bypass Code test 2024-04-17
sigma Linux Command History Tampering test 2024-04-17
sigma Pnscan Binary Data Transmission Activity test 2024-04-16
snort ET TROJAN CryptoWall Check-in M2 rev 4 2024-04-15
snort ET TROJAN Fileless infection dropped by EK CnC Beacon rev 2 2024-04-15
snort ET CURRENT_EVENTS Successful Gmail Phish 2016-12-06 rev 3 2024-04-15
suricata ET PHISHING Generic Credential Phish Redirection 2022-03-14 rev 4 2024-04-15
suricata ET HUNTING Possible ELF executable sent when remote host claims to send a Text File rev 3 2024-04-15
suricata ET PHISHING Possible Phishing Landing Page 2021-05-24 rev 3 2024-04-15
suricata ET PHISHING Possible Successful CDC Coronavirus Related Phish 2020-04-07 rev 4 2024-04-15
suricata ET PHISHING Possible Phishing Landing Page 2021-05-18 rev 3 2024-04-15
suricata ET WEB_SPECIFIC_APPS WordPress DB XML dump successful leakage rev 6 2024-04-15
suricata ET PHISHING Successful Gmail Phish 2016-12-06 rev 9 2024-04-15
sigma Potential DLL Sideloading Of KeyScramblerIE.DLL Via KeyScrambler.EXE test 2024-04-15
sigma Invoke-Obfuscation Via Use Clip - Powershell test 2024-04-15
sigma Potential PowerShell Command Line Obfuscation test 2024-04-15
sigma Invoke-Obfuscation STDIN+ Launcher test 2024-04-15
sigma Invoke-Obfuscation VAR+ Launcher test 2024-04-15
suricata ET ADWARE_PUP Suspicious User Agent Mozi11a rev 8 2024-04-14
suricata ET MALWARE Generic - 8Char.JAR Naming Algorithm rev 8 2024-04-14
suricata ET MALWARE Possible TickGroup Snack CnC Activity rev 4 2024-04-14
suricata ET MALWARE ConstructorWin32/Agent.V rev 13 2024-04-14
suricata ET INFO imPcRemote Download rev 5 2024-04-14
suricata ET PHISHING Apple Phishing Redirect 2019-01-02 rev 3 2024-04-14
suricata ET MALWARE Octopus Malware CnC Server Request rev 5 2024-04-14
suricata ET PHISHING Possible Successful Phish - Verify Email Error Message M1 Aug 14 2017 rev 4 2024-04-14
suricata ET MALWARE StrongPity Host Checkin rev 5 2024-04-14
suricata ET MALWARE Possible OceanLotus Time Check to Microsoft.com rev 5 2024-04-14
suricata ET PHISHING Terse POST to Wordpress Folder - Probable Successful Phishing M4 rev 7 2024-04-14
suricata ET MALWARE BKDR_BTMINE.MNR BitCoin Miner Retrieving Server IP Addresses rev 6 2024-04-14
suricata ET MALWARE Win32/Cryptrun.B Connectivity check rev 9 2024-04-14
suricata ET MALWARE Chthonic CnC Beacon 6 rev 7 2024-04-14
suricata ET PHISHING Successful DHL Phish 2019-10-18 rev 6 2024-04-14
suricata ET ADWARE_PUP Suspicious User Agent Smart-RTP rev 9 2024-04-14
suricata ET MALWARE Possible Satan Cryptor GeoIP Lookup rev 3 2024-04-14
suricata ET MALWARE Ransom.Win32.Birele.gsg Checkin rev 7 2024-04-14