Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET INFO PS1XML Powershell File Request rev 3 2024-04-04
suricata ET MALWARE Mimikatz x86 Executable Download Over HTTP rev 3 2024-04-04
suricata ET ADWARE_PUP Nivesro Cheat CnC Activity M1 rev 3 2024-04-04
suricata ET MALWARE Cobalt Strike Beacon Observed rev 5 2024-04-04
suricata ET MALWARE Suspected REDCURL CnC Activity M2 rev 4 2024-04-04
suricata ET MALWARE Win32/Colibri Loader Activity M3 rev 3 2024-04-04
suricata ET MALWARE CrownAdPro CnC Activity M2 rev 3 2024-04-04
suricata ET MALWARE Win32/Fujacks Variant CnC Activity rev 2 2024-04-04
suricata ET MALWARE APT Mustang Panda CnC Activity rev 2 2024-04-04
suricata ET MALWARE Trojan-Dropper.MSIL CnC Traffic - POST rev 2 2024-04-04
suricata ET MALWARE Reimageplus Ransomware Checkin rev 2 2024-04-04
suricata ET INFO LumOffice Uploading Screenshot rev 3 2024-04-04
suricata ET MALWARE FRAT Downloader Activity rev 2 2024-04-04
suricata ET MALWARE Mermaid Ransomware Variant CnC Activity M3 rev 2 2024-04-04
suricata ET MALWARE ELF/RedXOR CnC Checkin rev 2 2024-04-04
suricata ET MALWARE Likely Evil Request for uac.exe With Minimal Headers rev 3 2024-04-04
suricata ET ADWARE_PUP Win32/Adware.YoutubeDownloaderGuru.A Variant CnC Activity rev 2 2024-04-04
suricata ET MALWARE Possible GhostMiner CCBOT Component - CnC Checkin rev 2 2024-04-04
suricata ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt rev 3 2024-04-04
suricata ET MALWARE Win32/IcedID WebSocket Request M2 rev 2 2024-04-04
suricata ET ADWARE_PUP DownLoadAdmin Activity rev 2 2024-04-04
suricata ET MALWARE Jupyter Stealer CnC Checkin rev 4 2024-04-04
suricata ET MALWARE Magician/M461c14n Ransomware CnC Checkin rev 3 2024-04-04
suricata ET MALWARE FRAT Downloader Error Report POST rev 2 2024-04-04
suricata ET MALWARE Win32/Unk.HRESQ! MultiDownloader Checkin M2 rev 2 2024-04-04
suricata ET MALWARE DCRat Initial CnC Activity rev 3 2024-04-04
suricata ET MALWARE Win32/Dorv Stealer Exfiltrating Data to CnC rev 6 2024-04-04
suricata ET MALWARE Ragnarok Ransomware CnC Activity M1 rev 2 2024-04-04
suricata ET MALWARE DarkHotel Payload Uploading to CnC rev 4 2024-04-04
suricata ET CURRENT_EVENTS [Fireeye] Backdoor.HTTP.BEACON.[CSBundle Original Server 2] rev 5 2024-04-04
suricata ET MALWARE DTLoader Binary Request rev 3 2024-04-04
suricata ET INFO PSSC Powershell File Request rev 3 2024-04-04
suricata ET MALWARE CrownAdPro CnC Activity M5 rev 3 2024-04-04
suricata ET INFO PSRC Powershell File Request rev 3 2024-04-04
suricata ET PHISHING IRS COVID-19 Landing Page rev 2 2024-04-04
suricata ET MALWARE Suspected Win32/Hancitor Checkin rev 3 2024-04-04
suricata ET MALWARE Win32/X-Files Stealer Activity rev 3 2024-04-04
suricata ET MALWARE AutoHotKey offthewall Downloader Requesting Payload rev 3 2024-04-04
suricata ET MALWARE Vicious Panda CnC Activity rev 3 2024-04-04
suricata ET INFO Possible Sharepoint Resource Infection rev 2 2024-04-04