Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Bank of America Phishing Landing 2018-01-18 M1 rev 2 2024-03-14
suricata ET MALWARE Possibly Malicious Double Base64 Unicode Net.ServicePointManager M1 rev 4 2024-03-14
suricata GPL NETBIOS SMB irot little endian bind attempt rev 5 2024-03-14
suricata ET WEB_SERVER Generic Webshell Password Prompt Accessed on Internal Compromised Server rev 3 2024-03-14
suricata GPL CHAT IRC DCC chat request rev 12 2024-03-14
suricata ET PHISHING Microsoft Ajax Phishing Landing 2018-08-07 rev 2 2024-03-14
suricata ET PHISHING Possible Scotiabank Phishing Landing - Title over non SSL rev 2 2024-03-14
suricata ET MALWARE Likely Malicious wininet UA Downloading EXE rev 3 2024-03-14
suricata ET MALWARE AlienSpy RAT Checkin Set rev 3 2024-03-14
suricata ET EXPLOIT_KIT SNET EK Encoded VBS 1 rev 4 2024-03-14
suricata ET PHISHING Generic PhishKit Author Comment M7 2018-08-30 rev 2 2024-03-14
suricata GPL NETBIOS SMB-DS ISystemActivator unicode bind attempt rev 5 2024-03-14
suricata GPL NETBIOS SMB-DS DCERPC LSASS bind attempt rev 10 2024-03-14
suricata ET HUNTING SUSPICIOUS Local file read using read protocol rev 3 2024-03-14
suricata ET WEB_CLIENT DRIVEBY Generic URLENCODED CollectGarbage rev 5 2024-03-14
suricata ET MALWARE WEBC2-KT3 Intial Connection Beacon APT1 Related rev 3 2024-03-14
suricata ET PHISHING Post.ch Cloned Phishing Landing 2018-04-09 rev 2 2024-03-14
suricata ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 4 2024-03-14
suricata ET WEB_CLIENT Fake AV Phone Scam Landing Feb 12 rev 4 2024-03-14
suricata ET PHISHING OneDrive Phishing Landing 2018-04-09 rev 2 2024-03-14
suricata ET PHISHING Mailbox Verification Phishing Landing 2018-02-07 rev 2 2024-03-14
suricata ET PHISHING Possible Adobe PDF Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET PHISHING Possible Fedex Phishing Landing - Title over non SSL rev 2 2024-03-14
suricata ET EXPLOIT_KIT SunDown EK RIP Landing M4 B641 rev 3 2024-03-14
suricata ET INFO Possible SSLv2 Negotiation in Progress ClientMaster Key SSL2_IDEA_128_CBC_WITH_MD5 rev 3 2024-03-14
suricata ET PHISHING Capital One Phishing Landing 2018-02-13 M2 rev 2 2024-03-14
suricata ET PHISHING Facebook Upgrade Payment Phishing Landing 2018-02-05 rev 2 2024-03-14
suricata ET EXPLOIT_KIT Internet Explorer Information Disclosure Vuln as Observed in RIG EK Prefilter M1 Dec 06 rev 4 2024-03-14
suricata ET CHAT IRC USER Likely bot with 0 0 colon checkin rev 3 2024-03-14
suricata ET PHISHING Yahoo Account Verification Phishing Landing 2018-02-05 rev 2 2024-03-14
suricata ET MALWARE JST Perl IrcBot download rev 4 2024-03-14
suricata GPL NETBIOS SMB-DS winreg unicode create tree attempt rev 9 2024-03-14
suricata GPL NETBIOS SMB-DS nddeapi bind attempt rev 7 2024-03-14
suricata ET WEB_CLIENT Possible CVE-2014-4113 Exploit Download with Hurricane Panda IOC rev 4 2024-03-14
suricata GPL NETBIOS DCERPC irot little endian bind attempt rev 4 2024-03-14
suricata ET HUNTING SUSPICIOUS .LNK File Inside of Zip rev 2 2024-03-14
suricata ET MALWARE MSIL/Agent.TRM Task Command rev 2 2024-03-14
suricata ET PHISHING Retrieve Pending Emails Phishing Landing 2018-03-12 rev 2 2024-03-14
suricata ET PHISHING Possible Apple Store Phish Landing 2015-07-30 rev 4 2024-03-14
suricata ET PHISHING Successful Outlook Webmail Phishing 2015-11-21 rev 3 2024-03-14