Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET ATTACK_RESPONSE FTP inaccessible directory access AUX rev 9 2024-03-17
suricata ET ATTACK_RESPONSE FTP inaccessible directory access COM3 rev 9 2024-03-17
suricata ET WEB_SERVER Recon-ng User-Agent rev 5 2024-03-17
suricata ET MALWARE IMDDOS Botnet User-Agent IAMDDOS rev 8 2024-03-17
suricata ET HUNTING Suspicious Windows NT version 1 User-Agent rev 7 2024-03-17
suricata ET ATTACK_RESPONSE FTP inaccessible directory access NULL rev 9 2024-03-17
suricata ET INFO Cisco Device in Config Mode rev 10 2024-03-17
suricata ET HUNTING Suspicious Windows NT version 2 User-Agent rev 7 2024-03-17
suricata ET ADWARE_PUP Context Plus Spyware Install rev 11 2024-03-17
suricata ET ATTACK_RESPONSE FTP inaccessible directory access COM2 rev 9 2024-03-17
suricata ET P2P Soulseek rev 10 2024-03-17
suricata ET P2P Phatbot Control Connection rev 7 2024-03-17
suricata ET MALWARE IMDDOS Botnet User-Agent STORMDDOS rev 8 2024-03-17
suricata ET HUNTING Suspicious Windows NT version 3 User-Agent rev 8 2024-03-17
suricata ET ATTACK_RESPONSE FTP inaccessible directory access LPT1 rev 9 2024-03-17
suricata ET ATTACK_RESPONSE FTP inaccessible directory access LPT2 rev 9 2024-03-17
suricata GPL CHAT Google Talk Startup rev 4 2024-03-17
snort ET WEB_SPECIFIC_APPS Ruijie Network Switches Unauthenticated Command Execution rev 1 2024-03-15
suricata ET PHISHING Successful Generic Multi-Account Phish 2018-02-16 rev 2 2024-03-15
suricata ET CHAT GaduGadu Chat Keepalive PONG rev 6 2024-03-15
suricata ET INFO Executable Retrieved With Minimal HTTP Headers - Potential Second Stage Download rev 6 2024-03-15
suricata ET ADWARE_PUP CoinSurf Proxy CnC Response rev 2 2024-03-15
suricata ET ADWARE_PUP Overpro Spyware Install Report rev 11 2024-03-15
suricata ET MALWARE W32/BaneChant.APT Winword.pkg Redirect rev 4 2024-03-15
suricata ET ATTACK_RESPONSE Non-Local Burp Proxy Error rev 5 2024-03-15
suricata ET MALWARE Socks666 Successful Connect Packet Packet rev 8 2024-03-15
suricata ET CHAT GaduGadu Chat Receive Message rev 6 2024-03-15
suricata ET CHAT GaduGadu Chat File Send Accept rev 6 2024-03-15
suricata ET CHAT GaduGadu Chat Keepalive PING rev 5 2024-03-15
suricata ET CHAT GaduGadu Chat Server Login OK Packet rev 7 2024-03-15
suricata ET JA3 Hash - Possible RustyBuer Client Activity rev 2 2024-03-15
suricata ET CHAT GaduGadu Chat File Send Begin rev 6 2024-03-15
suricata ET CHAT GaduGadu Chat File Send Request rev 5 2024-03-15
suricata ET ACTIVEX winhlp32 ActiveX control attack - phase 1 rev 19 2024-03-15
suricata ET ADWARE_PUP Overpro Spyware Games rev 13 2024-03-15
suricata ET INFO Radmin Remote Control Session Authentication Response rev 9 2024-03-15
suricata ET WEB_CLIENT VLC Media Player .ass File Buffer Overflow Attempt rev 8 2024-03-15
suricata ET MALWARE W32/Asprox.FakeAV Affiliate Download Location Response - Likely Pay-Per-Install For W32/Papras.Spy or W32/ZeroAccess rev 6 2024-03-15
suricata ET CHAT GaduGadu Chat File Send Details rev 5 2024-03-15
suricata ET MALWARE Socks666 Connect Command Packet rev 8 2024-03-15