Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE JS/WSF Downloader Dec 08 2016 M4 rev 8 2024-04-13
suricata ET MALWARE SMS-Bomber Activity rev 4 2024-04-13
suricata ET PHISHING Successful Yahoo Credential Phish 2015-10-03 rev 6 2024-04-13
suricata ET MALWARE Possible APT29 Compressed Payload Download Request rev 5 2024-04-13
suricata ET MALWARE Observed AridViper CnC Domain in TLS SNI rev 3 2024-04-13
suricata ET PHISHING Successful Trademe Phish M3 2015-11-26 rev 7 2024-04-13
suricata ET PHISHING Successful Bank of America Phish M2 2015-10-02 rev 6 2024-04-13
suricata ET PHISHING Successful Docusign Phish 2015-10-28 rev 7 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2016-09-06 rev 5 2024-04-13
suricata ET ADWARE_PUP Loadmoney Checkin 1 rev 7 2024-04-13
suricata ET MALWARE Observed AgentTesla Domain Request rev 6 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 20 rev 6 2024-04-13
suricata ET PHISHING Successful Dropbox Phish 2016-09-14 rev 7 2024-04-13
suricata ET PHISHING Possible Successful Generic Web.App Hosted Phish 2020-10-14 rev 3 2024-04-13
suricata ET PHISHING Successful Western Union Phish 2016-09-27 rev 7 2024-04-13
suricata ET MALWARE EtumBot Ping rev 6 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup microsof-update.com rev 7 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup malwarecheck.info rev 6 2024-04-13
suricata ET PHISHING Successful Tesco Bank Phish M1 Phish 2016-12-15 rev 7 2024-04-13
suricata ET PHISHING Generic Credit Card Information in HTTP POST - Possible Successful Phish Jun 12 2017 rev 5 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 2 rev 6 2024-04-13
suricata ET PHISHING Successful Outlook Password Update Phish M1 2016-09-01 rev 5 2024-04-13
suricata ET WEB_SERVER DNS Query for Suspicious 33db9538.com Domain - Anuna Checkin - Compromised PHP Site rev 7 2024-04-13
suricata ET ADWARE_PUP Win32/Adware.Adposhel.A Checkin 3 rev 5 2024-04-13
suricata ET PHISHING Successful Emirate Phish 2016-09-29 rev 7 2024-04-13
suricata ET PHISHING Successful Outlook Phish 2016-10-18 rev 9 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2015-10-29 rev 5 2024-04-13
suricata ET ADWARE_PUP Ezula Install .exe rev 12 2024-04-13
suricata ET PHISHING Successful WhatsApp Phish M1 2016-12-07 rev 6 2024-04-13
suricata ET MALWARE APT28 DealersChoice DNS Lookup rev 7 2024-04-13
suricata ET PHISHING Successful HBL Bank Phish M1 2016-10-12 rev 8 2024-04-13
suricata ET PHISHING Netsolhost SSL Proxying - Possible Phishing Nov 24 2015 rev 7 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup securitypractic.com rev 7 2024-04-13
suricata ET MALWARE Win32/Pift Checkin 2 rev 5 2024-04-13
suricata ET PHISHING Successful Discover Phish M2 2016-12-14 rev 8 2024-04-13
suricata ET MALWARE LokiBot Related DNS query rev 7 2024-04-13
suricata ET MALWARE Amadey CnC Check-In rev 6 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 14 rev 6 2024-04-13
suricata ET MALWARE Win32.Shiz.fxm/Agent-TBT Checkin rev 7 2024-04-13
suricata ET MALWARE Clipsa Stealer - Exfiltration Activity rev 5 2024-04-13