Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET EXPLOIT Possible SAP NetWeaver CVE-2020-6287 Exploit Attempt rev 2 2024-03-14
suricata ET EXPLOIT CVE-2018-8174 Common Construct B64 M1 rev 3 2024-03-14
suricata ET PHISHING Successful Survey Credential Phish 2015-08-12 rev 5 2024-03-14
suricata ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1 rev 4 2024-03-14
suricata ET PHISHING Dropbox Phishing Landing 2018-02-14 rev 2 2024-03-14
suricata GPL NETBIOS SMB-DS winreg bind attempt rev 10 2024-03-14
suricata ET WEB_CLIENT pshell dl/execute primitives in wideb64 5 rev 3 2024-03-14
suricata ET PHISHING Possible Google Docs Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET EXPLOIT Firefox 0-day used against TOR browser Nov 29 2016 M2 rev 3 2024-03-14
suricata ET INFO SMB Executable File Transfer rev 3 2024-03-14
suricata ET PHISHING Turbotax Phishing Landing 2018-01-30 rev 2 2024-03-14
suricata ET WEB_CLIENT Fake AV Phone Scam Landing July 20 2015 M4 rev 4 2024-03-14
suricata ET MALWARE Win32/DarkVision RAT CnC Checkin M3 rev 3 2024-03-14
suricata ET MALWARE Parallax CnC Response Activity M16 rev 3 2024-03-14
suricata ET EXPLOIT Shenzhen TVT DVR/NVR/IPC ConfigSyncProc RCE Attempt rev 2 2024-03-14
suricata ET PHISHING Verizon Wireless Phishing Landing 2018-01-30 rev 2 2024-03-14
suricata ET EXPLOIT_KIT Cool Exploit Kit Plugin-Detect July 08 2013 rev 4 2024-03-14
suricata ET EXPLOIT_KIT Disdain EK Flash Exploit M3 Aug 23 2017 rev 3 2024-03-14
suricata ET PHISHING Bank of America Phishing Landing 2018-08-30 rev 2 2024-03-14
suricata ET INFO Office Document Download Containing AutoExec Macro rev 4 2024-03-14
suricata ET DOS Possible Memcached DDoS Amplification Response Outbound rev 2 2024-03-14
suricata ET EXPLOIT_KIT Evil Redirect Leading to EK Mar 18 2016 rev 3 2024-03-14
suricata ET PHISHING Apple Phishing Landing Nov 10 2017 rev 3 2024-03-14
suricata ET PHISHING Upgrade Email Account Phishing Landing 2018-03-12 rev 2 2024-03-14
suricata ET MALWARE Parallax CnC Response Activity M15 rev 3 2024-03-14
suricata ET MALWARE OSX/Mokes.A CnC Heartbeat rev 3 2024-03-14
suricata ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2024-03-14
suricata ET PHISHING Apple Phishing Landing 2015-07-27 rev 4 2024-03-14
suricata ET INFO Outbound MSSQL Connection to Non-Standard Port - Likely Malware rev 5 2024-03-14
suricata ET PHISHING Facebook Phishing Landing 2018-02-14 rev 2 2024-03-14
suricata ET EXPLOIT_KIT Spelevo EK Landing M1 rev 3 2024-03-14
suricata ET PHISHING Successful Generic Adobe Phish 2019-07-29 rev 2 2024-03-14
suricata ET EXPLOIT CVE-2015-2419 As observed in Magnitude EK rev 3 2024-03-14
suricata ET INFO Vulnerable Java Version 1.7.x Detected rev 64 2024-03-14
suricata ET WEB_CLIENT Fake Virus Phone Scam Audio Oct 30 rev 4 2024-03-14
suricata ET PHISHING Successful Fake Webmail Quota Phish 2015-09-10 rev 5 2024-03-14
suricata GPL NETBIOS SMB winreg unicode bind attempt rev 7 2024-03-14
suricata ET PHISHING PHOEN!X Apple Phish Landing Page 2015-12-29 rev 3 2024-03-14
suricata ET MALWARE Alphacrypt/TeslaCrypt Ransomware CnC Beacon Response rev 4 2024-03-14
suricata ET EXPLOIT_KIT SunDown EK RIP Landing M1 B643 rev 3 2024-03-14