Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
sigma MaxMpxCt Registry Value Changed test 2024-03-19
sigma Suspicious Command Patterns In Scheduled Task Creation test 2024-03-19
sigma Office Macros Warning Disabled test 2024-03-19
sigma Add SafeBoot Keys Via Reg Utility test 2024-03-19
sigma Potentially Suspicious CMD Shell Output Redirect test 2024-03-19
snort ET CURRENT_EVENTS Generic Phish Landing Page 2024-03-18 rev 1 2024-03-18
snort ET INFO Base64 Encoded Executable over Raw TCP rev 1 2024-03-18
suricata ET PHISHING Generic Phish Landing Page 2024-03-18 rev 1 2024-03-18
suricata ET SCAN Exabot Webcrawler User Agent rev 3 2024-03-18
suricata ET SCAN AOL Webcrawler User-Agent rev 2 2024-03-18
suricata ET MALWARE JS/Comm100 Trojan CnC Payload Inbound rev 3 2024-03-18
suricata ET HUNTING Base64 Encoded Executable over Raw TCP rev 1 2024-03-18
suricata ET MALWARE IMDDOS Botnet User-Agent IAMDDOS rev 8 2024-03-17
suricata ET SCAN Medusa User-Agent rev 5 2024-03-17
suricata ET WEB_SERVER Recon-ng User-Agent rev 5 2024-03-17
suricata ET P2P LimeWire P2P Traffic rev 5 2024-03-17
suricata ET ATTACK_RESPONSE FTP inaccessible directory access LPT3 rev 9 2024-03-17
suricata ET ADWARE_PUP SurfSidekick Download rev 10 2024-03-17
suricata ET MALWARE IMDDOS Botnet User-Agent YTDDOS rev 8 2024-03-17
suricata ET ATTACK_RESPONSE FTP inaccessible directory access AUX rev 9 2024-03-17
suricata ET HUNTING Suspicious Windows NT version 3 User-Agent rev 8 2024-03-17
suricata ET ATTACK_RESPONSE FTP inaccessible directory access COM1 rev 9 2024-03-17
suricata ET CHAT IRC authorization message rev 6 2024-03-17
suricata ET ATTACK_RESPONSE FTP inaccessible directory access LPT1 rev 9 2024-03-17
suricata ET MALWARE [PTsecurity] MZRevenge Ransomware Server Response rev 3 2024-03-17
suricata GPL CHAT Google Talk Startup rev 4 2024-03-17
suricata ET ATTACK_RESPONSE FTP inaccessible directory access LPT2 rev 9 2024-03-17
suricata ET P2P Soulseek rev 10 2024-03-17
suricata ET ADWARE_PUP Adware pricepeep Adware.Shopper.297 rev 5 2024-03-17
suricata ET MALWARE IMDDOS Botnet User-Agent STORMDDOS rev 8 2024-03-17
suricata ET CHAT ICQ Message rev 6 2024-03-17
suricata ET EXPLOIT libPNG - Possible integer overflow in allocation in png_handle_sPLT rev 10 2024-03-17
suricata ET SCAN Nessus User Agent rev 12 2024-03-17
suricata ET P2P Gnutella TCP Traffic rev 5 2024-03-17
suricata ET HUNTING Suspicious Windows NT version 2 User-Agent rev 7 2024-03-17
suricata ET GAMES Blizzard Web Downloader Install Detected rev 5 2024-03-17
suricata ET MALWARE IMDDOS Botnet User-Agent kav rev 8 2024-03-17
suricata ET HUNTING Suspicious Windows NT version 1 User-Agent rev 7 2024-03-17
suricata ET INFO Cisco Device New Config Built rev 10 2024-03-17
suricata ET MALWARE Dialer-715 Install Checkin rev 8 2024-03-17