Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Stobox Connectivity Check rev 9 2024-04-14
suricata ET PHISHING Successful Canada Revenue Agency COVID-19 Assistance Eligability Phish 2020-04-01 rev 4 2024-04-14
suricata ET MALWARE Legion Loader Activity Observed rev 4 2024-04-14
suricata ET ADWARE_PUP Win32/Agent.PMS Variant CnC Activity rev 14 2024-04-14
suricata ET MALWARE Zeus Bot Connectivity Check rev 27 2024-04-14
suricata ET EXPLOIT_KIT Spelevo VBS Payload Downloaded rev 6 2024-04-14
suricata ET MALWARE CozyDuke APT Possible SSL Cert 2 rev 6 2024-04-14
suricata ET MALWARE Dorkbot GeoIP Lookup to wipmania rev 13 2024-04-14
suricata ET MALWARE Gamut Spambot Checkin Response rev 6 2024-04-14
suricata ET MALWARE Win32/Sarwent Variant CnC Activity rev 4 2024-04-14
suricata ET MALWARE SmokeLoader Checkin rev 9 2024-04-14
suricata ET CURRENT_EVENTS [Fireeye] Backdoor.HTTP.BEACON.[CSBundle MSOffice POST] rev 6 2024-04-14
suricata ET MALWARE CozyDuke APT Possible SSL Cert 5 rev 6 2024-04-14
suricata ET MALWARE ConstructorWin32/Agent.V rev 13 2024-04-14
suricata ET MALWARE Win32/Filecoder.STOP Variant Request for Public Key rev 5 2024-04-14
suricata ET PHISHING Apple Phishing Redirect 2019-01-02 rev 3 2024-04-14
suricata ET ADWARE_PUP Suspicious User Agent Custom_56562_HttpClient/VER_STR_COMMA rev 7 2024-04-14
suricata ET MALWARE BKDR_BTMINE.MNR BitCoin Miner Retrieving Server IP Addresses rev 6 2024-04-14
suricata ET MALWARE Octopus Malware CnC Server Request rev 5 2024-04-14
suricata ET PHISHING Successful DHL Account Phish 2015-11-03 rev 9 2024-04-14
suricata ET MALWARE Possible Windows executable sent when remote host claims to send HTML/CSS Content rev 14 2024-04-14
suricata ET MALWARE Minirem rev 9 2024-04-14
suricata ET MALWARE StrongPity Host Checkin rev 5 2024-04-14
suricata ET PHISHING Possible Successful Phish - Verify Email Error Message M1 Aug 14 2017 rev 4 2024-04-14
suricata ET MALWARE Ransom.Win32.Birele.gsg Checkin rev 7 2024-04-14
suricata ET MALWARE Octopus Malware Initial Connectivity Check rev 5 2024-04-14
suricata ET MALWARE Chthonic CnC Beacon 6 rev 7 2024-04-14
suricata ET ADWARE_PUP Suspicious User Agent Smart-RTP rev 9 2024-04-14
suricata ET MALWARE APT CozyCar SSL Cert 1 rev 5 2024-04-14
suricata ET MALWARE Chthonic CnC Beacon 5 rev 9 2024-04-14
suricata ET MALWARE Linux/Ssemgrvd sshd Backdoor HTTP CNC 2 rev 7 2024-04-14
suricata ET MALWARE Windows Executable Sent When Remote Host Claims to Send a RAR Archive rev 7 2024-04-14
suricata ET MALWARE eCh0raix/QNAPCrypt CnC Activity - Started rev 6 2024-04-14
suricata ET MALWARE PlugX/Destory HTTP traffic rev 6 2024-04-14
suricata ET INFO Executable Download From DropBox rev 12 2024-04-14
suricata ET SCAN libwww-perl GET to // with specific HTTP header ordering without libwww-perl User-Agent rev 14 2024-04-14
suricata ET MALWARE [ESET] TA410 APT LookBack HTTP Server Response rev 3 2024-04-14
suricata ET CURRENT_EVENTS [Fireeye] Backdoor.HTTP.BEACON.[CSBundle MSOffice Server] rev 6 2024-04-14
suricata ET MALWARE Win32/CollectorStealer - Returning Client GeoIP Information rev 3 2024-04-14
suricata ET MALWARE Moose CnC Request M2 rev 8 2024-04-14