Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET INFO Vulnerable Java Version 10.0.x Detected rev 7 2024-03-14
suricata ET WEB_CLIENT Possible BadRabbit Driveby Download M2 Oct 24 2017 rev 3 2024-03-14
suricata ET PHISHING Google Drive Phishing Landing M1 July 24 2015 rev 5 2024-03-14
suricata ET GAMES Growtopia Hack - WrongGrow CnC Activity rev 2 2024-03-14
suricata ET PHISHING Wells Fargo Phishing Landing 2018-02-02 M3 rev 2 2024-03-14
suricata ET PHISHING Mailbox Renewal Phish Landing 2015-08-14 rev 5 2024-03-14
suricata ET MALWARE NanoCore RAT Keepalive Response 2 rev 11 2024-03-14
suricata ET EXPLOIT Possible CVE-2016-2209 Symantec PowerPoint Parsing Buffer Overflow M1 rev 3 2024-03-14
suricata GPL NETBIOS SMB-DS DCERPC LSASS direct bind attempt rev 9 2024-03-14
suricata ET PHISHING Google Drive Phishing Landing Jul 24 2015 rev 5 2024-03-14
suricata GPL NETBIOS SMB-DS irot unicode little endian bind attempt rev 5 2024-03-14
suricata ET INFO Vulnerable Java Version 13.0.x Detected rev 6 2024-03-14
suricata ET MALWARE Likely Evil EXE download from WinHttpRequest non-exe extension rev 4 2024-03-14
suricata ET WEB_CLIENT Tech Support Phone Scam Landing Dec 30 M1 rev 4 2024-03-14
suricata ET EXPLOIT_KIT Internet Explorer Information Disclosure Vuln as Observed in RIG EK Prefilter M2 Dec 06 rev 4 2024-03-14
suricata ET MALWARE Windows executable base64 encoded in XML rev 10 2024-03-14
suricata ET HUNTING SUSPICIOUS Possible Office Doc with Embedded VBA Project rev 5 2024-03-14
suricata ET CHAT GaduGadu Chat Client Login Packet rev 5 2024-03-14
suricata ET PHISHING Generic Mailbox Phishing Landing 2018-08-30 rev 2 2024-03-14
suricata ET MALWARE Win32/Spyder Successful CnC Checkin rev 2 2024-03-14
suricata ET WEB_CLIENT Tech Support Phone Scam Landing 2018-01-10 rev 4 2024-03-14
suricata ET INFO Exe32Pack Packed Executable Download rev 3 2024-03-14
suricata ET PHISHING Capital One Phishing Landing 2018-02-13 M1 rev 3 2024-03-14
suricata ET MALWARE W32/Asprox.FakeAV Affiliate Second Stage Download Location Request rev 5 2024-03-14
suricata ET MALWARE Possible CVE-2015-2424 RTF Dropping Sofacy rev 3 2024-03-14
suricata ET EXPLOIT_KIT Unknown EK Fake Microsoft Security Update Applet Sep 16 2013 rev 5 2024-03-14
suricata ET MALWARE General Win32 Backdoor Checkin POST Packet 1 rev 10 2024-03-14
suricata ET PHISHING Excel Online Phish Landing 2015-12-08 rev 5 2024-03-14
suricata ET PHISHING Microsoft Account Phishing Landing M2 2018-04-19 rev 3 2024-03-14
suricata ET MALWARE Possible malicious Office doc hidden in XML file rev 3 2024-03-14
suricata ET EXPLOIT_KIT Terror EK CVE-2016-0189 Exploit M2 rev 3 2024-03-14
suricata ET WEB_CLIENT Possible CVE-2013-1710/CVE-2012-3993 Firefox Exploit Attempt rev 4 2024-03-14
suricata ET PHISHING Possible Desjardins Phishing Landing - Title over non SSL rev 2 2024-03-14
suricata GPL NETBIOS DCERPC msqueue little endian bind attempt rev 6 2024-03-14
suricata ET INFO Unserialized Java Payload via RMI Response rev 2 2024-03-14
suricata ET WEB_CLIENT Oracle Java 6 Object Tag launchjnlp docbase Parameters Flowbits Set rev 4 2024-03-14
suricata ET MALWARE Parallax CnC Response Activity M7 rev 3 2024-03-14
suricata ET WEB_CLIENT Generic Fake Support Phone Scam Mar 9 M3 rev 4 2024-03-14
suricata ET EXPLOIT Possible ETERNALROMANCE MS17-010 rev 3 2024-03-14
suricata ET PHISHING Dropbox 000webhost Phishing Landing 2018-04-19 rev 2 2024-03-14