Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET ADWARE_PUP DownLoadAdmin Activity rev 2 2024-04-04
suricata ET MALWARE MSIL/Heracles Variant CnC Activity rev 3 2024-04-04
suricata ET INFO PSD1 Powershell File Request rev 3 2024-04-04
suricata ET MALWARE ChaseBot CnC Checkin rev 5 2024-04-04
suricata ET MALWARE Win32/Fujacks Variant CnC Activity rev 2 2024-04-04
suricata ET INFO PS1 Powershell File Request rev 3 2024-04-04
suricata ET INFO PSRC Powershell File Request rev 3 2024-04-04
suricata ET MALWARE MSIL/Juliens Botnet CnC Activity M1 rev 2 2024-04-04
suricata ET PHISHING NHS Gov UK COVID-19 Landing Page rev 2 2024-04-04
suricata ET ADWARE_PUP DownloadAssistant Activity rev 2 2024-04-04
suricata ET MALWARE Socelars Stealer CnC Activity rev 3 2024-04-04
suricata ET MALWARE CrownAdPro CnC Activity M4 rev 3 2024-04-04
suricata ET INFO Packity Proxy Connection rev 2 2024-04-04
suricata ET MALWARE Operation Interception Beacon rev 3 2024-04-04
suricata ET INFO CDXML Powershell File Request rev 3 2024-04-04
suricata ET MALWARE Win32/LODEINFO v0.4.x CnC Checkin rev 3 2024-04-04
suricata ET MALWARE Reimageplus Ransomware Checkin rev 2 2024-04-04
suricata ET MALWARE Magician/M461c14n Ransomware CnC Checkin rev 3 2024-04-04
suricata ET ADWARE_PUP Windows Explorer Tab Add-on Post Install Checkin rev 4 2024-04-04
suricata ET MALWARE Win32/Kryptik.HNBU CryptoMiner - GetTasks Request rev 3 2024-04-04
suricata ET CURRENT_EVENTS [Fireeye] Backdoor.HTTP.BEACON.[CSBundle MSOffice Server] rev 5 2024-04-04
suricata ET MALWARE FRAT Downloader Error Report POST rev 2 2024-04-04
suricata ET MALWARE Jupyter Stealer CnC Checkin rev 4 2024-04-04
suricata ET MALWARE Win32/IcedID WebSocket Request M2 rev 2 2024-04-04
suricata ET MALWARE FRat WebSockets Request M2 rev 2 2024-04-04
suricata ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt rev 3 2024-04-04
suricata ET INFO PSM1 Powershell File Request rev 3 2024-04-04
suricata ET ADWARE_PUP Win32/Sogou.H Variant Request rev 3 2024-04-04
suricata ET ADWARE_PUP NivesroCheat CnC Activity M2 rev 4 2024-04-04
suricata ET INFO LumOffice Uploading Screenshot rev 3 2024-04-04
suricata ET MALWARE Win32/Unk.HRESQ! MultiDownloader Checkin M2 rev 2 2024-04-04
suricata ET MALWARE Possible GhostMiner CCBOT Component - CnC Checkin rev 2 2024-04-04
suricata ET MALWARE Mimikatz x64 Executable Download Over HTTP rev 3 2024-04-04
suricata ET ADWARE_PUP Win32/DownloadAssistant.Q Variant Checkin rev 2 2024-04-04
snort ET CURRENT_EVENTS Parrot TDS Malicious Response rev 2 2024-04-03
snort ET TROJAN Win32/frebniis IIS Backdoor Trigger Attempt M1 rev 2 2024-04-03
snort ET CURRENT_EVENTS Parrot TDS Cleared Response rev 2 2024-04-03
snort ET CURRENT_EVENTS Parrot TDS Check rev 2 2024-04-03
snort ET TROJAN Win32/FireStealer Related Server Response rev 1 2024-04-03
snort ET TROJAN Win32/frebniis IIS Backdoor Trigger Attempt M2 rev 2 2024-04-03