Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET CHAT IRC USER command rev 18 2024-03-14
suricata ET EXPLOIT_KIT Spelevo EK Landing M2 rev 2 2024-03-14
suricata ET EXPLOIT_KIT SunDown EK RIP Landing M1 B642 rev 3 2024-03-14
suricata ET PHISHING Possible Raiffeisen Bank Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET EXPLOIT Possible SAP NetWeaver CVE-2020-6287 Exploit Success rev 3 2024-03-14
suricata ET INFO Possible SSLv2 Negotiation in Progress Server Hello rev 3 2024-03-14
suricata ET PHISHING Paypal Phishing Landing 2018-05-09 rev 2 2024-03-14
suricata ET PHISHING Ourtime Phishing Landing 2018-03-12 rev 3 2024-03-14
suricata GPL NETBIOS DCERPC LSASS direct bind attempt rev 10 2024-03-14
suricata ET MALWARE Drovorub monitor Module Server Response rev 3 2024-03-14
suricata ET WEB_CLIENT pshell dl/execute primitives in wideb64 6 rev 2 2024-03-14
suricata GPL NETBIOS SMB-DS IActivation unicode bind attempt rev 5 2024-03-14
suricata ET PHISHING Badoo Phishing Landing 2018-07-19 rev 4 2024-03-14
suricata ET EXPLOIT_KIT ScanBox Jun 06 2015 M3 T1 rev 4 2024-03-14
suricata ET EXPLOIT Possible ETERNALBLUE MS17-010 Echo Response rev 4 2024-03-14
suricata ET PHISHING TSB Bank / Lloyds Bank Phishing Landing 2018-02-01 rev 2 2024-03-14
suricata ET WEB_CLIENT PDF With Hidden Embedded File rev 3 2024-03-14
suricata ET MOBILE_MALWARE Possible Android CVE-2014-6041 rev 5 2024-03-14
suricata ET WEB_CLIENT Generic Fake Support Phone Scam Mar 9 M3 rev 4 2024-03-14
suricata ET EXPLOIT Ecessa WANWorx WVR-30 Cross-Site Request Forgery rev 2 2024-03-14
suricata GPL NETBIOS SMB-DS msqueue unicode bind attempt rev 5 2024-03-14
suricata GPL NETBIOS SMB-DS DCERPC LSASS unicode bind attempt rev 10 2024-03-14
suricata ET MALWARE Parallax CnC Response Activity M7 rev 3 2024-03-14
suricata ET PHISHING Generic Xbalti Phishing Landing 2018-11-26 rev 2 2024-03-14
suricata GPL NETBIOS SMB-DS msqueue little endian bind attempt rev 5 2024-03-14
suricata ET PHISHING PDF Cloud Phishing Landing 2018-04-19 rev 2 2024-03-14
suricata ET PHISHING Paypal Phishing Landing 2018-01-03 rev 2 2024-03-14
suricata ET PHISHING Possible Capital One Phishing Landing - Title over non SSL rev 2 2024-03-14
suricata ET EXPLOIT_KIT Sundown EK Secondary Landing Apr 20 2015 rev 4 2024-03-14
suricata GPL NETBIOS DCERPC IActivation little endian bind attempt rev 4 2024-03-14
suricata ET TELNET busybox MIRAI hackers - Possible Brute Force Attack rev 4 2024-03-14
suricata ET EXPLOIT Possible ETERNALROMANCE MS17-010 rev 3 2024-03-14
suricata ET EXPLOIT F5 BIG-IP rsync cmi authorized_keys access attempt rev 6 2024-03-14
suricata ET PHISHING Google Drive Phishing Landing Jul 24 2015 rev 5 2024-03-14
suricata ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 4 2024-03-14
suricata ET WEB_CLIENT Fake AV Phone Scam Landing Feb 12 rev 4 2024-03-14
suricata ET PHISHING Post.ch Cloned Phishing Landing 2018-04-09 rev 2 2024-03-14
suricata ET EXPLOIT_KIT Unknown EK Landing Feb 16 2015 b64 3 M2 rev 3 2024-03-14
suricata ET EXPLOIT_KIT Spelevo EK Landing M3 rev 2 2024-03-14
suricata ET WEB_CLIENT Fake Virus Phone Scam Landing Oct 19 M3 rev 5 2024-03-14