Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET EXPLOIT_KIT Nuclear SilverLight Exploit rev 3 2024-03-14
suricata ET WEB_CLIENT PWNJS JS Constructs rev 2 2024-03-14
suricata GPL NETBIOS SMB msqueue unicode bind attempt rev 5 2024-03-14
suricata ET PHISHING Chase Phishing Landing 2018-03-28 rev 2 2024-03-14
suricata ET PHISHING Possible Apple Store Phish Landing 2015-07-30 rev 4 2024-03-14
suricata ET EXPLOIT_KIT SofosFO/GrandSoft landing applet plus class Mar 03 2013 rev 6 2024-03-14
suricata GPL NETBIOS SMB ISystemActivator bind attempt rev 5 2024-03-14
suricata ET EXPLOIT Possible CVE-2014-6332 DECS2 rev 5 2024-03-14
suricata ET MALWARE Parallax CnC Response Activity M16 rev 3 2024-03-14
suricata ET MALWARE NanoCore RAT Keepalive 2 rev 3 2024-03-14
suricata ET MALWARE JS/Nemucod.M.gen downloading PDF payload rev 3 2024-03-14
suricata ET PHISHING Google Drive Phishing Landing 2015-11-20 rev 3 2024-03-14
suricata ET EXPLOIT_KIT Disdain EK Flash Exploit M3 Aug 23 2017 rev 3 2024-03-14
suricata GPL NETBIOS SMB-DS winreg create tree attempt rev 9 2024-03-14
suricata ET WEB_CLIENT Tech Support Phone Scam Landing 2017-07-26 rev 3 2024-03-14
suricata ET PHISHING MyADP Phishing Landing 2018-04-19 rev 2 2024-03-14
suricata ET PHISHING Fake Webmail Account Phishing Landing 2015-09-10 rev 4 2024-03-14
suricata GPL NETBIOS SMB-DS winreg bind attempt rev 5 2024-03-14
suricata ET PHISHING Successful Adobe Shared Document Phish 2015-11-14 rev 5 2024-03-14
suricata ET TELNET busybox ECCHI hackers - Possible Brute Force Attack rev 3 2024-03-14
suricata ET PHISHING Upgrade Advantage Phishing Landing 2018-02-22 rev 2 2024-03-14
suricata ET MALWARE DragonOK KHRAT Downloader Receiving Payload rev 3 2024-03-14
suricata ET WEB_CLIENT pshell dl/execute primitives in wideb64 5 rev 3 2024-03-14
suricata ET PHISHING Banque Populaire Phishing Landing 2018-02-05 rev 2 2024-03-14
suricata ET PHISHING Phishing Fake Document Loading Error 2015-10-01 rev 4 2024-03-14
suricata ET EXPLOIT_KIT Evil Redirect Leading to EK Mar 18 2016 rev 3 2024-03-14
suricata ET PHISHING Bank of America Phishing Landing 2018-08-30 rev 2 2024-03-14
suricata ET PHISHING Excel/Adobe Online Phishing Landing Nov 25 2015 rev 5 2024-03-14
suricata ET PHISHING Possible Google Docs Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET MALWARE JS/Nemucod.M.gen downloading EXE payload rev 3 2024-03-14
suricata ET EXPLOIT_KIT Spelevo EK Landing M1 rev 3 2024-03-14
suricata GPL NETBIOS SMB-DS DCEPRC ORPCThis request flood attempt rev 11 2024-03-14
suricata ET HUNTING SUSPICIOUS Path to BusyBox rev 3 2024-03-14
suricata GPL NETBIOS DCERPC irot bind attempt rev 4 2024-03-14
suricata ET PHISHING Successful Generic Miarroba Phish 2019-07-11 rev 2 2024-03-14
suricata ET PHISHING Sparkasse Phishing Landing 2018-02-15 rev 2 2024-03-14
suricata ET PHISHING Paypal Phishing Landing 2018-01-29 rev 2 2024-03-14
suricata ET PHISHING Successful Generic Adobe Phish 2019-07-29 rev 2 2024-03-14
suricata ET WEB_CLIENT DRIVEBY GENERIC ShellExecute in Hex No Seps rev 3 2024-03-14
suricata ET EXPLOIT_KIT ReverseLoader Base64 Payload Inbound rev 3 2024-03-14