Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS Cartweaver 3 Local File Inclusion Attempt rev 4 2024-04-07
suricata ET MALWARE Trojan-Dropper.Win32.Agent.ksja rev 7 2024-04-07
suricata ET MALWARE Poweliks Abnormal HTTP Headers high likelihood of Poweliks infection rev 7 2024-04-07
suricata ET WEB_SPECIFIC_APPS SiteGo file parameter Local File Inclusion Attempt rev 4 2024-04-07
suricata ET WEB_SERVER CVE-2014-6271 Attempt In HTTP Headers Line Continuation Evasion LF rev 5 2024-04-07
suricata ET MALWARE LankerBoy HTTP CnC Beacon rev 6 2024-04-07
suricata ET MALWARE Banker Boleto Fraud JS_BROBAN.SM Checkin 3 rev 7 2024-04-07
suricata ET WEB_SPECIFIC_APPS PRADO PHP Framework functional_tests.php Local File Inclusion Vulnerability rev 5 2024-04-07
suricata ET WEB_SPECIFIC_APPS Achievo atknodetype parameter Local File Inclusion Vulnerability rev 6 2024-04-07
suricata ET MALWARE Common Upatre URI/Headers Struct rev 7 2024-04-07
suricata ET MALWARE CBReplay.P Ransomware rev 5 2024-04-07
suricata ET WEB_SPECIFIC_APPS Manhali download.php Local File Inclusion Vulnerability rev 4 2024-04-07
suricata ET MALWARE Troj/ReRol.A Checkin 2 rev 7 2024-04-07
suricata ET MALWARE Known Sinkhole Response Header rev 7 2024-04-07
suricata ET MALWARE Havex RAT CnC Server Response HTML Tag rev 7 2024-04-07
suricata ET MALWARE Win32/Toby.N Multilocker Checkin rev 6 2024-04-07
suricata ET DOS HOIC with booster outbound rev 8 2024-04-07
suricata ET WEB_SPECIFIC_APPS Wordpress Myflash path parameter Local File Inclusion Attempt rev 4 2024-04-07
suricata ET MALWARE APT.Agtid callback rev 5 2024-04-07
suricata ET WEB_SPECIFIC_APPS simple machines forum include parameter Local File Inclusion Attempt rev 4 2024-04-07
suricata ET MALWARE Blue Bot DDoS Proxy Request rev 9 2024-04-07
suricata ET MALWARE Unknown - Loader - Check .exe Updated rev 7 2024-04-07
suricata ET WEB_SERVER CVE-2014-6271 Attempt In HTTP Headers Line Continuation Evasion CRLF rev 6 2024-04-07
suricata ET MALWARE W32/Citadel Download From CnC Server /files/ attachment rev 9 2024-04-07
suricata ET WEB_SPECIFIC_APPS CubeCart loc parameter Local File Inclusion Attempt rev 4 2024-04-07
suricata ET MALWARE TripleNine RAT Checkin rev 9 2024-04-07
suricata ET WEB_SPECIFIC_APPS SiteGo OpenFolder parameter Local File Inclusion Attempt rev 4 2024-04-07
suricata ET MALWARE Kuluoz/Asprox CnC Response rev 7 2024-04-07
suricata ET MALWARE CommentCrew Possible APT c2 communications get command client key rev 6 2024-04-07
suricata ET EXPLOIT_KIT LightsOut EK POST Compromise POST rev 6 2024-04-07
suricata ET MALWARE FrauDrop Checkin rev 5 2024-04-07
suricata ET INFO Control Panel Applet File Download rev 5 2024-04-07
suricata ET MALWARE Kronos Checkin rev 5 2024-04-07
suricata ET MALWARE [ANY.RUN] Phemedrone Stealer Exfiltration via Telegram rev 2 2024-04-07
suricata ET MALWARE MSIL/Autorun.AD Checkin rev 8 2024-04-07
suricata ET MALWARE Dorkbot Loader Payload Request rev 7 2024-04-07
suricata ET WEB_SPECIFIC_APPS Amateur Photographer Image Gallery file parameter Local File Inclusion Attempt rev 4 2024-04-07
suricata ET MALWARE Troj/ReRol.A Checkin 1 rev 8 2024-04-07
suricata ET MALWARE Win32.Meredrop Checkin rev 6 2024-04-07
suricata ET MALWARE Possible Red October proxy CnC 2 rev 5 2024-04-07