Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CURRENT_EVENTS Parrot TDS Malicious Response rev 2 2024-04-03
suricata ET MALWARE Win32/VB.PNU CnC Checkin rev 2 2024-04-03
suricata ET ADWARE_PUP Win32/ReImageRepair.T CnC Activity rev 3 2024-04-03
suricata ET MALWARE Win32/VB.QPK CnC Checkin rev 2 2024-04-03
suricata ET MALWARE Win32/TrojanDropper.Agent.SSQ Checkin rev 2 2024-04-03
suricata ET CURRENT_EVENTS Possible Crypto Drainer Enumerate rev 3 2024-04-03
suricata ET EXPLOIT_KIT Balada JavaScript Inject rev 2 2024-04-03
suricata ET MALWARE Antinum WebSockets Start rev 3 2024-04-03
suricata ET MALWARE Win32/Zegost!ml CnC Checkin rev 3 2024-04-03
suricata GPL ATTACK_RESPONSE id check returned nobody rev 9 2024-04-03
suricata ET MALWARE Win32/Meimaii Checkin rev 2 2024-04-03
suricata ET EXPLOIT_KIT Parrot TDS Malicious Response rev 3 2024-04-03
suricata GPL INFO Linksys router default username and password login attempt rev 15 2024-04-03
suricata ET MALWARE Ducktail APT Style Payload Request rev 3 2024-04-03
suricata ET MALWARE ReVBShell Command Response rev 3 2024-04-03
suricata ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity rev 1 2024-04-03
suricata ET MALWARE Suspected APT34 Related SSD Backdoor Response rev 2 2024-04-03
suricata ET MALWARE Win32/Sventore.B CnC Checkin rev 2 2024-04-03
suricata ET MALWARE Win32/RA-based.NCX CnC Checkin rev 2 2024-04-03
suricata ET INFO Smocker Server Mock Tool Response rev 3 2024-04-03
suricata ET MALWARE SnappyTCP Reverse Shell Client Checkin M1 rev 3 2024-04-03
suricata ET INFO Terse Request For Bitbucket Snippet rev 3 2024-04-03
suricata GPL INFO Linksys router default password login attempt rev 12 2024-04-03
suricata ET MALWARE CargoBay CnC Activity rev 3 2024-04-03
suricata GPL ATTACK_RESPONSE id check returned web rev 10 2024-04-03
suricata ET INFO 404 Response with Javascript Variable in Page rev 2 2024-04-03
suricata ET MALWARE Antinum HTTP Checkin rev 3 2024-04-03
suricata ET PHISHING Tech Support/Refund Scam Landing Inbound 2022/04/25 rev 3 2024-04-03
suricata ET MALWARE Villain C2 Framework HTTP Server Response rev 2 2024-04-03
suricata ET MALWARE Win32/Wacapew CnC Checkin rev 3 2024-04-03
suricata ET MALWARE Arkei/Vidar/Mars Stealer Variant rev 4 2024-04-03
suricata ET MALWARE ViperSoftX HTTP CnC Activity rev 2 2024-04-03
suricata GPL ATTACK_RESPONSE command completed rev 14 2024-04-03
suricata GPL EXPLOIT NTLM ASN.1 vulnerability scan attempt rev 14 2024-04-03
suricata ET MALWARE Win32/Wacapew.C!ml CnC Checkin rev 2 2024-04-03
suricata ET EXPLOIT_KIT Parrot TDS Cleared Response rev 3 2024-04-03
suricata ET MALWARE SnappyTCP Reverse Shell Client Checkin M2 rev 3 2024-04-03
suricata ET EXPLOIT_KIT Parrot TDS Check M2 rev 2 2024-04-03
suricata ET MALWARE Bandit Stealer Config Inbound rev 2 2024-04-03
suricata GPL ATTACK_RESPONSE command error rev 11 2024-04-03