Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful PNC Bank Phish M1 2016-10-14 rev 7 2024-04-13
suricata ET WEB_SERVER pxyscand Suspicious User Agent Inbound rev 5 2024-04-13
suricata ET PHISHING Successful Paypal Phish M1 Sep 15 2017 rev 4 2024-04-13
suricata ET MALWARE Silent Miner Changelog Checkin rev 5 2024-04-13
suricata ET PHISHING Successful Paypal Phish M3 2016-10-05 rev 7 2024-04-13
suricata ET PHISHING Successful Outlook Phish 2015-08-18 rev 8 2024-04-13
suricata ET MALWARE Observed AridViper CnC Domain in TLS SNI rev 3 2024-04-13
suricata ET PHISHING Successful Google Drive Phish 2016-01-12 rev 7 2024-04-13
suricata ET PHISHING Successful DHL Phish 2016-08-11 rev 7 2024-04-13
suricata ET PHISHING Successful Canada Revenue Agency Phish 2016-08-30 rev 6 2024-04-13
suricata ET DOS Bittorrent User-Agent inbound - possible DDOS rev 5 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 27 rev 6 2024-04-13
suricata ET PHISHING Successful Gmail Phish 2015-11-05 rev 8 2024-04-13
suricata ET EXPLOIT Netgear WNDR Router DNS Change POST Request rev 7 2024-04-13
suricata ET PHISHING Successful Google Drive Phish M1 2016-12-02 rev 7 2024-04-13
suricata ET PHISHING Successful Apple Store Phish M2 2016-12-29 rev 6 2024-04-13
suricata ET MALWARE Pteranodon Variant 2 Backdoor Checkin rev 5 2024-04-13
suricata ET HUNTING Possible Malicious Document Request to .tk domain rev 4 2024-04-13
suricata ET PHISHING Successful Blocked Email Account Phish M1 2016-08-23 rev 6 2024-04-13
suricata ET PHISHING Successful Apple Phish M3 Feb 06 2016 rev 6 2024-04-13
suricata ET PHISHING Suspicious Generic Login - Possible Successful Phish 2019-01-02 rev 3 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 6 rev 6 2024-04-13
suricata ET MALWARE APT32 Komprogo DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful Chase Phish M4 2016-08-26 rev 5 2024-04-13
suricata ET PHISHING Successful Banco do Brasil Phish M3 Sep 29 2017 rev 4 2024-04-13
suricata ET PHISHING Successful Facebook Phish 2019-04-26 rev 4 2024-04-13
suricata ET ADWARE_PUP PUP W32/DownloadGuide.D rev 5 2024-04-13
suricata ET PHISHING Successful Battle.net Phish 2015-09-22 rev 5 2024-04-13
suricata ET MALWARE Bossabot DDoS tool RFI attempt rev 5 2024-04-13
suricata ET PHISHING Successful WhatsApp Payment Phish 2016-09-01 rev 7 2024-04-13
suricata ET MALWARE Glupteba CnC Domain in DNS Lookup rev 4 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 21 rev 6 2024-04-13
suricata ET PHISHING Successful Netflix Phish 2016-10-12 rev 7 2024-04-13
suricata ET MALWARE CryptON/Nemesis/X3M Ransomware Onion Domain rev 6 2024-04-13
suricata ET SCAN Sqlmap SQL Injection Scan rev 10 2024-04-13
suricata ET PHISHING Successful Woodforest Bank Phish M1 2015-08-31 rev 6 2024-04-13
suricata ET MALWARE Evil Monero Cryptocurrency Miner Request Pools rev 5 2024-04-13
suricata ET PHISHING Successful Apple Phish M1 2016-09-29 rev 5 2024-04-13
suricata ET MALWARE Java Archive sent when remote host claims to send an image rev 7 2024-04-13
suricata ET PHISHING Successful Apple Phish Oct 31 2016 rev 7 2024-04-13