Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET CHAT GaduGadu Chat Server Available Status Packet rev 5 2024-03-14
suricata ET PHISHING Wells Fargo Phishing Landing 2018-02-02 M9 rev 2 2024-03-14
suricata ET MALWARE HTTPCore CnC Tasking File rev 3 2024-03-14
suricata ET MALWARE PNScan.2 Inbound Status Check - set rev 5 2024-03-14
suricata ET INFO Possible SSLv2 Negotiation in Progress Client Master Key SSL2_RC4_128_WITH_MD5 rev 3 2024-03-14
suricata ET EXPLOIT_KIT RIG encrypted payload M1 Feb 02 2016 rev 4 2024-03-14
suricata ET EXPLOIT Firefox 0-day used against TOR browser Nov 29 2016 M1 rev 3 2024-03-14
suricata ET WEB_CLIENT Microsoft Office RTF Stack Buffer Overflow rev 7 2024-03-14
suricata ET PHISHING Possible Alibaba Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata GPL NETBIOS SMB nddeapi unicode bind attempt rev 7 2024-03-14
suricata GPL NETBIOS SMB msqueue little endian bind attempt rev 5 2024-03-14
suricata GPL NETBIOS SMB winreg unicode bind attempt rev 6 2024-03-14
suricata ET CHAT IRC USER command rev 18 2024-03-14
suricata ET EXPLOIT QNAP Shellshock script retrieval rev 5 2024-03-14
suricata ET MALWARE DarkComet-RAT init connection rev 6 2024-03-14
suricata ET PHISHING Possible Chase Phishing Landing - Title over non SSL rev 2 2024-03-14
suricata ET PHISHING Mailbox Verification Phishing Landing 2018-01-31 rev 3 2024-03-14
suricata ET EXPLOIT_KIT DRIVEBY Sednit EK IE Exploit CVE-2013-1347 M1 rev 4 2024-03-14
suricata GPL NETBIOS SMB-DS msqueue unicode bind attempt rev 5 2024-03-14
suricata GPL NETBIOS DCERPC IActivation little endian bind attempt rev 4 2024-03-14
suricata ET HUNTING SUSPICIOUS PPT Download with Embedded OLE Object rev 7 2024-03-14
suricata ET MALWARE Socks666 Connection Initial Packet rev 6 2024-03-14
suricata ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M1 rev 2 2024-03-14
suricata ET TELNET busybox MIRAI hackers - Possible Brute Force Attack rev 4 2024-03-14
suricata ET PHISHING Paypal Phishing Landing 2018-01-03 rev 2 2024-03-14
suricata ET PHISHING Paypal Phishing Landing 2018-05-09 rev 2 2024-03-14
suricata ET EXPLOIT_KIT SunDown EK RIP Landing M1 B642 rev 3 2024-03-14
suricata ET MALWARE SharpExec EXE Lateral Movement Tool Downloaded rev 2 2024-03-14
suricata GPL NETBIOS DCERPC LSASS direct bind attempt rev 10 2024-03-14
suricata ET PHISHING Possible Successful Apple Phish 2015-07-27 rev 4 2024-03-14
suricata ET EXPLOIT Ecessa WANWorx WVR-30 Cross-Site Request Forgery rev 2 2024-03-14
suricata ET WEB_CLIENT pshell dl/execute primitives in wideb64 6 rev 2 2024-03-14
suricata ET PHISHING Yahoo Account Phish Landing 2015-10-23 rev 4 2024-03-14
suricata ET EXPLOIT ZBL EPON ONU Broadband Router Remote Privilege Escalation - Responding with Superuser Credentials rev 2 2024-03-14
suricata ET INFO Possible SSLv2 Negotiation in Progress Server Hello rev 3 2024-03-14
suricata ET WEB_CLIENT Google Chrome Pdfium JPEG2000 Heap Overflow rev 3 2024-03-14
suricata ET PHISHING Possible Capital One Phishing Landing - Title over non SSL rev 2 2024-03-14
suricata ET CHAT GaduGadu Chat Server Welcome Packet rev 7 2024-03-14
suricata ET PHISHING TSB Bank / Lloyds Bank Phishing Landing 2018-02-01 rev 2 2024-03-14
suricata ET PHISHING Netflix Phishing Landing 2018-05-02 rev 3 2024-03-14