Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET EXPLOIT_KIT TDS Sutra - cookie set rev 7 2024-04-13
suricata ET MALWARE Operation EvilTraffic Initial Redirect M2 rev 7 2024-04-13
suricata ET PHISHING Successful CenturyLink Phish 2016-10-12 rev 7 2024-04-13
suricata ET MALWARE CryptON/Nemesis/X3M Ransomware Onion Domain rev 6 2024-04-13
suricata ET PHISHING Successful Dropbox Phish 2016-10-14 rev 7 2024-04-13
suricata ET MALWARE Critroni Variant .onion Proxy Domain rev 5 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup windows-updater.com rev 7 2024-04-13
suricata ET PHISHING Successful Alibaba Phish 2016-10-26 rev 6 2024-04-13
suricata ET PHISHING Successful Apple Phish M2 2016-09-14 rev 6 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 12 rev 6 2024-04-13
suricata ET PHISHING Successful BB&T Bank Phish 2016-12-15 rev 8 2024-04-13
suricata ET MALWARE Stabuniq Checkin rev 6 2024-04-13
snort ET TROJAN Possible UPSTYLE Command Attempt rev 1 2024-04-12
snort ET TROJAN Possible UPSTYLE Payload Retrieval Attempt rev 1 2024-04-12
suricata ET INFO JAR Size Under 30K Size - Potentially Hostile rev 9 2024-04-12
suricata ET PHISHING Successful Colleagues Quarantined with COVID-19 Phish 2020-03-25 rev 3 2024-04-12
suricata ET MALWARE SystemdMiner CnC Activity rev 3 2024-04-12
suricata ET MALWARE ELF_BASHLITE.SMB Dropping Files rev 6 2024-04-12
suricata ET MALWARE Trojan Related Lame Updater User-Agent rev 6 2024-04-12
suricata ET MALWARE Dyreza RAT Ex-filtrating Data rev 9 2024-04-12
suricata ET HUNTING HTTP POST Form Submitted to Weebly Free Hosting rev 3 2024-04-12
suricata ET MALWARE W32/PointOfSales.Misc CnC Activity rev 5 2024-04-12
suricata ET WEB_SERVER PHP Crawler rev 4 2024-04-12
suricata ET MALWARE W32/Asprox Passgrub POST CnC Beacon rev 4 2024-04-12
suricata ET MALWARE W32/Spy.KeyLogger.OCI CnC Checkin rev 4 2024-04-12
suricata ET MALWARE Mirage Campaign checkin rev 4 2024-04-12
suricata ET DOS LOIC Javascript DDoS Outbound rev 7 2024-04-12
suricata ET PHISHING Successful Adobe Online Document Phish 2016-04-25 rev 4 2024-04-12
suricata ET MOBILE_MALWARE CoolReaper User-Agent rev 5 2024-04-12
suricata ET WEB_SERVER WebShell - ASPyder - File Create - POST Structure rev 5 2024-04-12
suricata ET USER_AGENTS Steam HTTP Client User-Agent rev 3 2024-04-12
suricata ET PHISHING Possible MyEtherWallet Phishing Landing - SSL/TLS Certificate Observed rev 3 2024-04-12
suricata ET MALWARE Anchor_DNS Trickbot DNS CnC Command - Receive Data rev 3 2024-04-12
suricata ET MALWARE Possible UPSTYLE Payload Retrieval Attempt rev 1 2024-04-12
suricata ET EXPLOIT_KIT RIG Landing URI Struct March 20 2015 rev 5 2024-04-12
suricata ET EXPLOIT_KIT Possible Dynamic Dns Exploit Pack Java exploit rev 8 2024-04-12
suricata ET MALWARE W32/SpeedingUpMyPC.Rootkit Install CnC Beacon rev 4 2024-04-12
suricata ET MALWARE W32/Echmark/MarkiRAT CnC Host Checkin rev 3 2024-04-12
suricata ET EXPLOIT_KIT Possible Red Dot Exploit Kit Single Character JAR Request rev 4 2024-04-12
suricata ET INFO Application Crash Report Sent to Microsoft rev 7 2024-04-12