Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Common Upatre URI/Headers Struct rev 7 2024-04-07
suricata ET WEB_SPECIFIC_APPS PRADO PHP Framework functional.php Local File Inclusion Vulnerability rev 5 2024-04-07
suricata ET WEB_SPECIFIC_APPS Wordpress Google Doc Embedder plugin file parameter Local File Inclusion Attempt rev 4 2024-04-07
suricata ET MALWARE [CrowdStrike] ANCHOR PANDA - Adobe Gh0st Beacon rev 3 2024-04-07
suricata ET ADWARE_PUP W32/Stan Malvertising.Dropper CnC Beacon rev 6 2024-04-07
suricata ET WEB_SPECIFIC_APPS Achievo atknodetype parameter Local File Inclusion Vulnerability rev 6 2024-04-07
suricata ET MALWARE APT.Agtid callback rev 5 2024-04-07
suricata ET MALWARE Blue Bot DDoS Proxy Request rev 9 2024-04-07
suricata ET MALWARE Unknown - Loader - Check .exe Updated rev 7 2024-04-07
suricata ET INFO Office Document Containing AutoExec Macro Via smtp rev 3 2024-04-07
suricata ET WEB_SPECIFIC_APPS simple machines forum include parameter Local File Inclusion Attempt rev 4 2024-04-07
suricata ET WEB_SPECIFIC_APPS Banana Dance name Parameter Local File Inclusion Attempt rev 4 2024-04-07
suricata ET MALWARE Win32/Toby.N Multilocker Checkin rev 6 2024-04-07
suricata ET MALWARE Possible Red October proxy CnC 1 rev 6 2024-04-07
suricata ET MALWARE Possible Stitur Secondary Download rev 7 2024-04-07
suricata ET MALWARE Kronos Checkin rev 5 2024-04-07
suricata ET EXPLOIT_KIT LightsOut EK POST Compromise POST rev 6 2024-04-07
suricata ET MALWARE ELF/Mayhem Checkin rev 6 2024-04-07
suricata ET MALWARE Kuluoz/Asprox CnC Response rev 7 2024-04-07
suricata ET WEB_SERVER CVE-2014-6271 Attempt In HTTP Headers Line Continuation Evasion CRLF rev 6 2024-04-07
suricata ET EXPLOIT_KIT Nuclear Exploit Kit exe.exe Payload rev 4 2024-04-07
suricata ET MALWARE Trojan-Dropper.Win32.Agent.ksja rev 7 2024-04-07
suricata ET EXPLOIT_KIT Redkit Exploit Kit Three Numerical Character Naming Convention PDF Request rev 4 2024-04-07
suricata ET MALWARE [ANY.RUN] Phemedrone Stealer Exfiltration via Telegram rev 2 2024-04-07
suricata ET MALWARE Havex RAT CnC Server Response rev 5 2024-04-07
suricata ET MALWARE Backdoor.Win32/Dervec.gen Connectivity Check to Google rev 13 2024-04-07
suricata ET MALWARE Citadel Checkin rev 6 2024-04-07
suricata ET INFO Control Panel Applet File Download rev 5 2024-04-07
suricata ET MALWARE FrauDrop Checkin rev 5 2024-04-07
suricata ET MALWARE MSIL/Autorun.AD Checkin rev 8 2024-04-07
suricata ET WEB_SERVER ATTACKER WebShell - Weevely - Cookie rev 4 2024-04-07
suricata ET MALWARE Backdoor.Win32/Likseput.A Checkin Windows Vista/7/8 rev 8 2024-04-07
suricata ET EXPLOIT_KIT Java File Sent With X-Powered By HTTP Header - Common In Exploit Kits rev 5 2024-04-07
suricata ET WEB_SPECIFIC_APPS CMSQLITE mediaAdmin.php file Local File Inclusion Attempt rev 4 2024-04-07
suricata ET WEB_SPECIFIC_APPS PRADO PHP Framework functional_tests.php Local File Inclusion Vulnerability rev 5 2024-04-07
suricata ET MALWARE Mal/Ransom-CE Connectivity Check rev 7 2024-04-07
suricata ET MALWARE Known Sinkhole Response Header rev 7 2024-04-07
suricata ET MALWARE Downeks Checkin rev 6 2024-04-07
suricata ET WEB_SPECIFIC_APPS Manhali download.php Local File Inclusion Vulnerability rev 4 2024-04-07
suricata ET PHISHING PUBG Credential Phish Landing Page 2022-08-22 rev 2 2024-04-07