Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE MSIL/KeyRedirEx Banker Requesting Redirect/Inject List rev 5 2024-04-14
suricata ET MALWARE Octopus Malware Initial Connectivity Check rev 5 2024-04-14
suricata ET MALWARE TickGroup ABK Backdoor CnC Check-in rev 4 2024-04-14
suricata ET MALWARE ConstructorWin32/Agent.V rev 13 2024-04-14
suricata ET PHISHING Successful DHL Account Phish 2015-11-03 rev 9 2024-04-14
suricata ET MALWARE Chthonic CnC Beacon 6 rev 7 2024-04-14
suricata ET PHISHING Possible Successful Phish - Verify Email Error Message M1 Aug 14 2017 rev 4 2024-04-14
suricata ET MALWARE Win32/Filecoder.STOP Variant Request for Public Key rev 5 2024-04-14
suricata ET ADWARE_PUP Suspicious User Agent Smart-RTP rev 9 2024-04-14
suricata ET MALWARE StrongPity Host Checkin rev 5 2024-04-14
suricata ET MALWARE f0xy Checkin rev 8 2024-04-14
suricata ET MALWARE BKDR_BTMINE.MNR BitCoin Miner Retrieving Server IP Addresses rev 6 2024-04-14
suricata ET MALWARE Possible TickGroup Snack CnC Activity rev 4 2024-04-14
suricata ET MALWARE Minirem rev 9 2024-04-14
suricata ET MALWARE Octopus Malware CnC Server Request rev 5 2024-04-14
suricata ET PHISHING Terse POST to Wordpress Folder - Probable Successful Phishing M2 rev 9 2024-04-14
suricata ET MALWARE FortDisco Reporting Status rev 8 2024-04-14
suricata ET MALWARE CenterPOS CnC 2 rev 6 2024-04-14
suricata ET MALWARE Dorkbot GeoIP Lookup to wipmania rev 13 2024-04-14
suricata ET ADWARE_PUP Win32/Agent.PMS Variant CnC Activity rev 14 2024-04-14
suricata ET MALWARE Octopus Malware CnC Server Connectivity Check rev 5 2024-04-14
suricata ET EXPLOIT_KIT Possible PurpleFox/RIG EK Flash Request M2 rev 5 2024-04-14
suricata ET MALWARE LDPinch Checkin Post rev 6 2024-04-14
suricata ET MALWARE TrueBot/Silence.Downloader Keep-Alive rev 5 2024-04-14
suricata ET EXPLOIT_KIT Spelevo VBS Payload Downloaded rev 6 2024-04-14
suricata ET MALWARE CozyDuke APT Possible SSL Cert 2 rev 6 2024-04-14
suricata ET MALWARE Tinba Checkin rev 9 2024-04-14
suricata ET MALWARE CozyDuke APT Possible SSL Cert 3 rev 6 2024-04-14
suricata ET MALWARE Tortoiseshell/HMH Download Request rev 5 2024-04-14
suricata ET MALWARE Stobox Connectivity Check rev 9 2024-04-14
suricata ET MALWARE SmokeLoader Checkin rev 9 2024-04-14
suricata ET PHISHING Successful Mailbox Update Phish 2016-02-17 rev 8 2024-04-14
suricata ET MALWARE Win32/Neutrino ping rev 8 2024-04-14
suricata ET MALWARE Legion Loader Activity Observed rev 4 2024-04-14
suricata ET MOBILE_MALWARE Android.C2P.Qd!c Ransomware CnC Beacon rev 7 2024-04-14
suricata ET MALWARE Vawtrak/NeverQuest Server Response rev 9 2024-04-14
suricata ET MALWARE Dirt Jumper/Russkill3 Checkin rev 14 2024-04-14
suricata ET MOBILE_MALWARE AdWare.AndroidOS.Ewind.cd Response rev 4 2024-04-14
suricata ET MALWARE Win32/CollectorStealer - Returning Client GeoIP Information rev 3 2024-04-14
suricata ET EXPLOIT_KIT DRIVEBY Incognito Payload Download /load/*exe rev 12 2024-04-14