Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET EXPLOIT_KIT Possible Red Dot Exploit Kit Single Character JAR Request rev 4 2024-04-12
suricata ET MALWARE Win32/Oliga Fake User Agent rev 7 2024-04-12
suricata ET INFO SUSPICIOUS UA starting with Mozilla/8 rev 7 2024-04-12
suricata ET MALWARE Soraya C2 User-Agent rev 5 2024-04-12
suricata ET PHISHING Successful Yobit Cryptocurrency Exchange Phish 2017-12-28 rev 4 2024-04-12
suricata ET MALWARE Mazilla Suspicious User-Agent Jan 15 2015 rev 6 2024-04-12
suricata ET MALWARE Qtloader encrypted check-in Oct 19 M1 rev 4 2024-04-12
suricata ET WEB_SERVER PHP.//Input in HTTP POST rev 5 2024-04-12
suricata ET USER_AGENTS EmailSiphon Suspicious User-Agent Outbound rev 5 2024-04-12
suricata ET MALWARE W32/SpeedingUpMyPC.Rootkit Successful Install GET Type CnC Beacon rev 8 2024-04-12
suricata ET MALWARE Variant.Strictor Dropper rev 8 2024-04-12
suricata ET MOBILE_MALWARE Android Spyware Dowgin Checkin rev 4 2024-04-12
suricata ET SCAN struts-pwn User-Agent rev 4 2024-04-12
suricata ET PHISHING Successful O2 Phish 2018-03-12 rev 3 2024-04-12
suricata ET WEB_SERVER UA WordPress probable DDOS-Attack rev 7 2024-04-12
suricata ET WORM Win32.Socks.s HTTP Post Checkin rev 7 2024-04-12
suricata ET MALWARE Anchor_DNS Trickbot DNS CnC Command - Sending Data rev 4 2024-04-12
suricata ET MALWARE MINEBRIDGE CnC Response rev 3 2024-04-12
suricata ET MALWARE W32/Ke3chang.MyWeb.APT Campaign CnC Beacon rev 4 2024-04-12
suricata ET MALWARE Possible Win32/SillyFDC WordPress Traffic rev 5 2024-04-12
suricata ET SCAN NETWORK Outgoing Masscan detected rev 7 2024-04-12
suricata ET INFO TOR Consensus Data Requested rev 2 2024-04-12
suricata ET DOS LOIC POST rev 6 2024-04-12
suricata ET MALWARE W32/Dexter Infostealer CnC POST rev 4 2024-04-12
suricata ET MALWARE W32/DownloaderAgent.fajk Second Stage Download List Requested rev 5 2024-04-12
suricata ET MALWARE Trojan-Spy.Win32.KeyLogger.acuj Checkin rev 6 2024-04-12
suricata ET MALWARE Zeus POST Request to CnC sk1 and bn1 post parameters rev 8 2024-04-12
suricata ET MALWARE W32/Syndicasec.Backdoor CnC Beacon rev 6 2024-04-12
suricata ET MALWARE W32/Safe User Agent Fantasia rev 5 2024-04-12
suricata ET MALWARE CozyDuke APT Possible SSL Cert 8 rev 7 2024-04-12
suricata ET MALWARE W32/PointOfSales.Misc CnC Activity rev 5 2024-04-12
suricata ET MALWARE MINEBRIDGE CnC Request rev 3 2024-04-12
suricata ET MALWARE W32/Ke3chang.Snake.APT Campaign CnC Beacon rev 4 2024-04-12
suricata ET MALWARE Win32/Sisproc Variant POST to CnC Server rev 6 2024-04-12
suricata ET MALWARE W32/Asprox php.dll.crp POST CnC Beacon rev 6 2024-04-12
suricata ET MALWARE [PTsecurity] Gozi/Ursnif Payload v12 rev 4 2024-04-12
suricata ET INFO JAR Size Under 30K Size - Potentially Hostile rev 9 2024-04-12
suricata ET PHISHING Ebay Phishing Landing 2018-02-07 rev 3 2024-04-12
suricata ET MALWARE W32/24x7Help.ScareWare CnC Beacon rev 5 2024-04-12
suricata ET SCAN Possible Scanning for Vulnerable JBoss rev 4 2024-04-12