Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Clipsa Stealer - Exfiltration Activity rev 5 2024-04-13
suricata ET PHISHING Successful Dropbox Phish 2016-10-14 rev 7 2024-04-13
suricata ET MALWARE Spora Ransomware DNS Query rev 7 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 15 rev 6 2024-04-13
suricata ET SCAN DominoHunter Security Scan in Progress rev 5 2024-04-13
suricata ET MALWARE Win32.Shiz.fxm/Agent-TBT Checkin rev 7 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 14 rev 6 2024-04-13
suricata ET PHISHING Successful Apple Phish M1 2016-09-29 rev 5 2024-04-13
suricata ET PHISHING Successful Wells Fargo Phish M1 2016-09-16 rev 6 2024-04-13
suricata ET MALWARE Amadey CnC Check-In rev 6 2024-04-13
suricata ET MALWARE LokiBot Related DNS query rev 7 2024-04-13
suricata ET PHISHING Successful Instagram Phish Mar 14 2017 rev 5 2024-04-13
suricata ET PHISHING Successful Linkedin Phish 2016-11-17 rev 8 2024-04-13
suricata ET PHISHING Successful Wells Fargo Phish 2016-10-05 rev 7 2024-04-13
suricata ET INFO HTTPie User-Agent Outbound rev 4 2024-04-13
suricata ET MALWARE EVILNUM CnC Host Checkin rev 4 2024-04-13
suricata ET PHISHING Successful Adobe Shared Document Phish 2016-08-19 rev 8 2024-04-13
suricata ET MALWARE Possible Outbound WebShell GIF rev 5 2024-04-13
suricata ET MALWARE Suckfly/Nidiran Backdoor DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful Apple Phish M2 Mar 15 2017 rev 5 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2016-10-31 rev 5 2024-04-13
suricata ET SCAN SQL Power Injector SQL Injection User Agent Detected rev 8 2024-04-13
suricata ET EXPLOIT AVTECH Authenticated Command Injection in CloudSetup.cgi rev 4 2024-04-13
suricata ET PHISHING Microsoft Office Phishing Landing 2016-12-18 rev 7 2024-04-13
suricata ET PHISHING Successful Outlook Phish 2016-08-31 rev 8 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 22 rev 6 2024-04-13
suricata ET PHISHING Terse POST to Wordpress Folder - Probable Successful Phishing rev 6 2024-04-13
suricata ET USER_AGENTS Suspicious User-Agent Moxilla rev 8 2024-04-13
suricata ET MALWARE Operation EvilTraffic Initial Redirect M1 rev 7 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup rev 6 2024-04-13
suricata ET MALWARE Backdoor.Win32.Agent.bjjv Checkin rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2016-01-15 M2 rev 5 2024-04-13
suricata ET MALWARE Win32/Spy.Obator .onion Proxy Domain rev 5 2024-04-13
suricata ET PHISHING Successful ABSA Phish 2016-10-26 rev 6 2024-04-13
suricata ET PHISHING Successful DHL Phish 2016-09-16 rev 8 2024-04-13
suricata ET INFO OpenVPN Update Check rev 6 2024-04-13
suricata ET EXPLOIT_KIT Neutrino Exploit Kit Redirector To Landing Page rev 5 2024-04-13
suricata ET MALWARE Glupteba CnC Domain in DNS Lookup rev 4 2024-04-13
suricata ET PHISHING Successful SFR Phishing 2015-11-24 rev 5 2024-04-13
suricata ET PHISHING Successful Amazon Account Phish 2015-08-21 rev 6 2024-04-13