Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE APT28 Zebrocy/Zekapab POST Template Structure rev 4 2024-04-13
suricata ET MALWARE BalkanDoor CnC Checkin - Server Response rev 4 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 46 rev 6 2024-04-13
suricata ET PHISHING Successful Dropbox Phish 2016-10-25 rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Phish M2 2016-10-17 rev 7 2024-04-13
suricata ET PHISHING Successful National Bank Phish Jan 05 2017 rev 6 2024-04-13
suricata ET PHISHING Successful Workspace Phish 2016-01-26 rev 7 2024-04-13
suricata ET PHISHING Successful Zimbra Phish 2015-10-30 rev 8 2024-04-13
suricata ET MALWARE CustomRAT DNS lookup rev 6 2024-04-13
suricata ET PHISHING Facebook Phishing Domain in DNS Lookup rev 4 2024-04-13
suricata ET PHISHING Successful Account Update Phish 2015-09-01 rev 6 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 1 rev 6 2024-04-13
suricata ET EXPLOIT_KIT BottleEK Landing rev 4 2024-04-13
suricata ET MALWARE Observed CDC Ransomware User-Agent rev 4 2024-04-13
suricata ET MALWARE Win32.Fareit.A/Pony Downloader Checkin rev 8 2024-04-13
suricata ET PHISHING Successful iCloud Phish 2015-12-02 rev 6 2024-04-13
suricata ET MALWARE APT28 DealersChoice DNS Lookup rev 7 2024-04-13
suricata ET PHISHING Successful Personalized Phish 2016-09-14 rev 6 2024-04-13
suricata ET PHISHING Successful Apple Phish M2 2016-10-07 rev 7 2024-04-13
suricata ET PHISHING Possible Successful Tripod.com Phish 2016-03-31 rev 5 2024-04-13
suricata ET PHISHING Successful DHL Phish 2015-11-14 rev 6 2024-04-13
suricata ET EXPLOIT Eir D1000 Remote Command Injection Attempt Outbound rev 3 2024-04-13
suricata ET PHISHING Successful Facebook Phish 2019-08-29 rev 3 2024-04-13
suricata ET MALWARE APT28 Zebrocy/Zekapab CnC Checkin rev 4 2024-04-13
suricata ET PHISHING Successful Linkedin Phish 2016-11-18 rev 6 2024-04-13
suricata ET PHISHING Successful US Bank Phish 2016-06-09 M2 rev 5 2024-04-13
suricata ET PHISHING Successful National Bank Phish Mar 13 2017 rev 5 2024-04-13
suricata ET PHISHING Successful Apple Phish M1 Feb 06 2016 rev 6 2024-04-13
suricata ET PHISHING Successful Mailbox Upgrade Phish 2016-06-27 M2 rev 5 2024-04-13
suricata ET PHISHING Successful Made In China Phish 2016-09-28 rev 7 2024-04-13
suricata ET MALWARE Cryptowall 3.0 .onion Proxy Domain rev 5 2024-04-13
suricata ET PHISHING Successful Linkedin Phish 2016-12-09 rev 7 2024-04-13
suricata ET PHISHING Successful Yahoo Password Strength Phish M1 2016-08-24 rev 5 2024-04-13
suricata ET MALWARE Observed DNS Query to Reborn/Ovidiy Stealer CnC Domain rev 6 2024-04-13
suricata ET PHISHING Successful Alibaba Phish 2016-10-28 rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Account Phish Oct 30 rev 5 2024-04-13
suricata ET HUNTING Possible Malicious Document Request to .tk domain rev 4 2024-04-13
suricata ET ADWARE_PUP OSX ADWARE/Mackeeper Checkin rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2015-12-24 M1 rev 5 2024-04-13
suricata ET PHISHING Successful Tata Communications Phish 2016-08-19 rev 7 2024-04-13