Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Possible Apple Store Phish Landing 2015-07-30 rev 4 2024-03-14
suricata ET PHISHING cPanel Phishing Landing 2015-12-01 rev 3 2024-03-14
suricata ET PHISHING Apple Account Phishing Landing 2015-11-18 rev 5 2024-03-14
suricata ET MALWARE Likely Malicious Windows SCT Download MSXMLHTTP AX M2 rev 3 2024-03-14
suricata ET PHISHING IRS Phishing Landing 2018-05-07 rev 2 2024-03-14
suricata GPL NETBIOS SMB-DS llsrpc unicode bind attempt rev 5 2024-03-14
suricata ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 rev 4 2024-03-14
suricata ET PHISHING Dropbox Shared Document Phishing Landing Feb 21 2017 rev 3 2024-03-14
suricata GPL NETBIOS SMB-DS msqueue unicode little endian bind attempt rev 5 2024-03-14
suricata ET PHISHING Netflix Phishing Landing 2017-07-20 rev 2 2024-03-14
suricata ET MALWARE Possible Office Doc with Embedded VBA containing Reverse Meterpreter Shell rev 3 2024-03-14
suricata ET WEB_CLIENT Generic Fake Support Phone Scam Mar 8 rev 4 2024-03-14
suricata ET EXPLOIT_KIT EITest SocENG Inject M2 rev 4 2024-03-14
suricata ET CHAT IRC JOIN command rev 21 2024-03-14
suricata ET EXPLOIT Ghostscript LockDistillerParams type confusion attempt rev 2 2024-03-14
suricata ET MALWARE Possible SharpShooter Framework Generated Script rev 2 2024-03-14
suricata ET MALWARE Netwire RAT Check-in 2 rev 3 2024-03-14
suricata ET EXPLOIT GoCD Authentication Bypass Successful Leak rev 3 2024-03-14
suricata ET PHISHING [eSentire] Docusign Phishing Landing 2018-04-09 rev 4 2024-03-14
suricata ET PHISHING Generic Smail Phishing Landing 2018-01-29 rev 2 2024-03-14
suricata ET PHISHING Possible Apple Store Phish Landing 2015-07-30 rev 5 2024-03-14
suricata GPL NETBIOS SMB llsrpc unicode little endian bind attempt rev 5 2024-03-14
suricata ET MALWARE Win32/Ropest.H CnC - INBOUND set rev 3 2024-03-14
suricata ET PHISHING Chalbhai Phishing Landing 2018-03-12 rev 2 2024-03-14
suricata ET TELNET busybox MEMES Hackers - Possible Brute Force Attack rev 3 2024-03-14
suricata ET PHISHING Bank of America Phishing Landing 2018-01-18 M1 rev 2 2024-03-14
suricata ET PHISHING Yahoo Phishing Landing 2018-02-20 rev 2 2024-03-14
suricata GPL NETBIOS SMB irot unicode little endian bind attempt rev 5 2024-03-14
suricata ET WEB_CLIENT Possible Internet Explorer VBscript failure to handle error case information disclosure obfuscated CVE-2014-6332 rev 4 2024-03-14
suricata ET INFO Vulnerable Java Version 12.0.x Detected rev 5 2024-03-14
suricata ET EXPLOIT_KIT Nuclear EK Gate Injected iframe Oct 22 2014 rev 4 2024-03-14
suricata ET PHISHING Generic MRxJoker Phishing Landing 2018-09-27 rev 2 2024-03-14
suricata ET MALWARE Likely Malicious wininet UA Downloading EXE rev 3 2024-03-14
suricata ET EXPLOIT_KIT Unknown EK Fake Microsoft Security Update Applet Sep 16 2013 rev 5 2024-03-14
suricata ET EXPLOIT_KIT Internet Explorer Information Disclosure Vuln as Observed in RIG EK Prefilter M1 Dec 06 rev 4 2024-03-14
suricata ET MALWARE Windows executable base64 encoded in XML rev 10 2024-03-14
suricata ET PHISHING Facebook Phishing Landing 2018-02-12 rev 2 2024-03-14
suricata ET EXPLOIT_KIT Terror EK CVE-2015-2419 Exploit rev 3 2024-03-14
suricata ET EXPLOIT_KIT Unknown EK Secondary Landing Page May 01 2015 M2 rev 3 2024-03-14
suricata ET PHISHING Successful Outlook Webmail Phishing 2015-11-21 rev 3 2024-03-14