Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Win32/SystemHijack.gen CnC Checkin rev 2 2024-04-03
suricata ET EXPLOIT_KIT Parrot TDS Check rev 3 2024-04-03
suricata ET MALWARE Villain C2 Framework HTTP Server Response rev 2 2024-04-03
suricata ET PHISHING Tech Support/Refund Scam Landing Inbound 2022/04/25 rev 3 2024-04-03
suricata ET MALWARE Jupyter Stealer CnC Checkin M2 rev 3 2024-04-03
suricata ET MALWARE Win32/Wacapew.C!ml CnC Checkin rev 2 2024-04-03
suricata ET EXPLOIT_KIT Parrot TDS Cleared Response rev 3 2024-04-03
suricata ET PHISHING Manhattan College Phish Landing Page 2022-01-10 rev 2 2024-04-03
suricata ET MALWARE Maldoc CnC Checkin rev 2 2024-04-03
suricata ET MALWARE Suspected APT34 Related SSD Backdoor Response rev 2 2024-04-03
suricata ET INFO Smocker Server Mock Tool Response rev 3 2024-04-03
suricata ET MALWARE SnappyTCP Reverse Shell Client Checkin M1 rev 3 2024-04-03
suricata ET MALWARE Win32/Sventore.B CnC Checkin rev 2 2024-04-03
suricata ET MALWARE Ducktail APT Style Payload Request rev 3 2024-04-03
suricata ET EXPLOIT_KIT Parrot TDS Malicious Response rev 3 2024-04-03
suricata ET CURRENT_EVENTS Possible Crypto Drainer Fetch rev 3 2024-04-03
suricata ET MALWARE [ANY.RUN] Konni.APT Exfiltration rev 3 2024-04-03
suricata ET MALWARE Gamaredon APT Backdoor Related Activity rev 2 2024-04-03
suricata ET EXPLOIT_KIT Parrot TDS Check M2 rev 2 2024-04-03
suricata ET MALWARE Win32/VB.PNU CnC Checkin rev 2 2024-04-03
suricata ET HUNTING [ANY.RUN] DARKCLOUD Style External IP Check rev 3 2024-04-03
suricata ET MALWARE SnappyTCP Reverse Shell Client Checkin M2 rev 3 2024-04-03
suricata ET MALWARE Antinum HTTP Checkin rev 3 2024-04-03
suricata GPL ATTACK_RESPONSE command completed rev 14 2024-04-03
suricata GPL EXPLOIT NTLM ASN.1 vulnerability scan attempt rev 14 2024-04-03
suricata ET MALWARE Win32/Wacapew CnC Checkin rev 3 2024-04-03
suricata ET MALWARE Win32/Uwamson.A!ml CnC Checkin rev 2 2024-04-03
suricata ET MALWARE Xehook Stealer Data Exfiltration Attempt rev 2 2024-04-03
suricata ET MALWARE Win32/VB.QTV CnC Checkin rev 2 2024-04-03
suricata ET MALWARE Fodcha Botnet Style DNS Server Lookup rev 3 2024-04-03
suricata ET MALWARE Trojan-PSW.Win32.Stealer.sb CnC rev 3 2024-04-03
suricata ET INFO 404 Response with Javascript Variable in Page rev 2 2024-04-03
suricata ET MALWARE Bandit Stealer Config Inbound rev 2 2024-04-03
suricata ET INFO Terse Request For Bitbucket Snippet rev 3 2024-04-03
suricata ET MALWARE Cobalt Strike Malleable C2 JQuery Custom Profile M6 rev 3 2024-04-03
suricata ET MALWARE Win32/frebniis IIS Backdoor Trigger Attempt M1 rev 2 2024-04-03
suricata ET MALWARE Xehook Stealer CnC Checkin rev 3 2024-04-03
suricata GPL ATTACK_RESPONSE id check returned web rev 10 2024-04-03
suricata ET ADWARE_PUP pdfspeedup Initial CnC Checkin rev 2 2024-04-03
suricata GPL INFO Linksys router default password login attempt rev 12 2024-04-03