Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Possible Winnti-related DNS Lookup rev 6 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 4 rev 6 2024-04-13
suricata ET MALWARE Potao CnC rev 6 2024-04-13
suricata ET MALWARE Mirai Botnet Domain Observed rev 6 2024-04-13
suricata ET PHISHING Successful Ameli.fr Phish M1 2016-10-26 rev 6 2024-04-13
suricata ET PHISHING Successful Facebook Phish 2019-08-29 rev 4 2024-04-13
suricata ET MALWARE ABUSE.CH Locky Domain rev 5 2024-04-13
suricata ET MALWARE CryptON/Nemesis/X3M Ransomware Onion Domain rev 6 2024-04-13
suricata ET PHISHING Successful DHL Phish 2015-11-14 rev 6 2024-04-13
suricata ET PHISHING Successful Wells Fargo Phish M2 2016-09-16 rev 5 2024-04-13
suricata ET INFO Peach C++ Library User Agent Outbound rev 7 2024-04-13
suricata ET PHISHING Successful Google Drive Phish 2016-09-27 rev 7 2024-04-13
suricata ET MALWARE Perl/Calfbot C&C DNS request rev 11 2024-04-13
suricata ET PHISHING Successful Westpac Bank Phish 2016-08-31 rev 7 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup rev 6 2024-04-13
suricata ET PHISHING Successful Dropbox Business Phish 2016-11-17 rev 5 2024-04-13
suricata ET PHISHING Successful Wells Fargo Account Phish 2015-08-18 rev 7 2024-04-13
suricata ET PHISHING Successful Chase Phish 2016-10-31 rev 7 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 1 rev 6 2024-04-13
suricata ET INFO IncrediMail Install Callback rev 6 2024-04-13
suricata ET HUNTING Suspicious HTTP POST Only Containing Pass - Possible Phishing rev 3 2024-04-13
suricata ET PHISHING Successful Gmail Account Update Phish 2016-05-10 rev 7 2024-04-13
suricata ET PHISHING Successful Dropbox Phish 2016-10-25 rev 7 2024-04-13
suricata ET PHISHING Successful Webmail Mailbox Quota Phish 2016-09-02 rev 7 2024-04-13
suricata ET PHISHING Successful Impots.gouv.fr Phish 2016-10-31 rev 5 2024-04-13
suricata ET MALWARE Banker PWS/Infostealer HTTP GET Checkin rev 11 2024-04-13
suricata ET PHISHING Successful Account Update Phish 2016-09-06 rev 6 2024-04-13
suricata ET EXPLOIT D-link DI604 Known Malicious Router DNS Change GET Request rev 6 2024-04-13
suricata ET PHISHING Successful Wildblue Phishing M1 2015-11-24 rev 7 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 1 rev 6 2024-04-13
suricata ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound rev 3 2024-04-13
suricata ET MALWARE DNS query for Known OphionLocker Domain rev 5 2024-04-13
suricata ET PHISHING Successful National Australia Bank 2016-09-28 rev 7 2024-04-13
suricata ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 13 rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish M1 2016-10-05 rev 7 2024-04-13
suricata ET MALWARE Win32.Fareit.A/Pony Downloader Checkin rev 8 2024-04-13
suricata ET MALWARE APT28 DealersChoice DNS Lookup rev 7 2024-04-13
suricata ET PHISHING Successful Mailbox Upgrade Phish 2016-06-27 M2 rev 5 2024-04-13
suricata ET MALWARE Cryptowall 3.0 .onion Proxy Domain rev 5 2024-04-13
suricata ET PHISHING Successful Impots.gouv.fr Phish M1 2015-08-21 rev 7 2024-04-13