Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE MSUpdater Connectivity Check to Google rev 4 2024-04-12
suricata ET MALWARE Mirage Campaign checkin rev 4 2024-04-12
suricata ET MALWARE W32/Spy.KeyLogger.OCI CnC Checkin rev 4 2024-04-12
suricata ET MALWARE SystemdMiner CnC Activity rev 3 2024-04-12
suricata ET PHISHING Successful Microsoft Office Phish 2020-02-26 rev 3 2024-04-12
suricata ET SCAN Chroot-apache0day Unknown Web Scanner User Agent rev 6 2024-04-12
suricata ET MALWARE W32/PointOfSales.Misc CnC Beacon rev 5 2024-04-12
suricata ET SCAN NETWORK Incoming Masscan detected rev 7 2024-04-12
suricata ET MALWARE Possible UPSTYLE Payload Retrieval Attempt rev 1 2024-04-12
suricata ET MALWARE W32/Ke3chang.MovieStar.APT Campaign CnC Beacon rev 4 2024-04-12
suricata ET MALWARE Trojan-Downloader.Win32.AutoIt.mj Checkin rev 5 2024-04-12
suricata ET MALWARE Zeus POST Request to CnC sk1 and bn1 post parameters rev 8 2024-04-12
suricata ET MALWARE General Win32 Backdoor Checkin POST rev 8 2024-04-12
suricata ET MALWARE W32/Zemra.DDoS.Bot Variant CnC Beacon rev 5 2024-04-12
suricata ET MALWARE DecebalPOS User-Agent rev 5 2024-04-12
suricata ET PHISHING Possible Successful Yahoo Phish Jun 23 2015 rev 7 2024-04-12
suricata ET MALWARE W32/Ke3chang.MyWeb.APT Campaign CnC Beacon rev 4 2024-04-12
suricata ET MALWARE Anchor_DNS Trickbot DNS CnC Command - Receive Data rev 3 2024-04-12
suricata ET HUNTING URL Observed in PDF Downloaded via Dropbox rev 3 2024-04-12
suricata ET EXPLOIT_KIT RIG Landing URI Struct March 20 2015 rev 5 2024-04-12
suricata ET MALWARE W32/Ke3chang.Dream.APT Campaign CnC Beacon 2 rev 4 2024-04-12
suricata ET MALWARE VBulletin Backdoor C2 URI Structure rev 6 2024-04-12
suricata ET MALWARE W32/Asprox.ClickFraudBot CnC Beacon rev 5 2024-04-12
suricata ET PHISHING Possible Successful Remax Phish - AOL Creds Jun 23 2015 rev 7 2024-04-12
suricata ET MALWARE Cryptowall .onion Proxy Domain rev 4 2024-04-12
suricata ET PHISHING Successful Google Drive Phish June 17 2015 rev 7 2024-04-12
suricata ET MALWARE Carberp CnC request POST /set/task.html rev 6 2024-04-12
suricata ET MALWARE Win32/Oliga Fake User Agent rev 7 2024-04-12
suricata ET MALWARE W32/Neverquest.InfoStealer Configuration Request CnC Beacon rev 4 2024-04-12
suricata ET MALWARE Smurf2 CnC Checkin rev 4 2024-04-12
suricata ET MALWARE Hiloti loader installed successfully request rev 6 2024-04-12
suricata ET EXPLOIT_KIT Possible Red Dot Exploit Kit Single Character JAR Request rev 4 2024-04-12
suricata ET PHISHING Successful Craigslist Phish 2016-04-25 rev 4 2024-04-12
suricata ET PHISHING Successful Phish Outlook Credentials Oct 01 2015 rev 6 2024-04-12
suricata ET MALWARE Anchor_DNS Trickbot DNS CnC Command - Sending Data rev 4 2024-04-12
suricata ET HUNTING Bit.do Shortened Link Request to EXE rev 3 2024-04-12
suricata ET MALWARE Qtloader encrypted check-in Oct 19 M1 rev 4 2024-04-12
suricata ET MALWARE Variant.Strictor Dropper rev 8 2024-04-12
suricata ET INFO SUSPICIOUS UA starting with Mozilla/9 rev 6 2024-04-12
suricata ET MALWARE Driveby Loader Request List.php rev 4 2024-04-12