Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING DHL Phish Landing Sept 14 2015 rev 7 2024-03-14
suricata ET EXPLOIT_KIT RIG EK Landing Feb 26 2016 rev 4 2024-03-14
suricata ET PHISHING Wells Fargo Phishing Landing 2018-02-02 M9 rev 2 2024-03-14
suricata ET EXPLOIT_KIT RIG encrypted payload M1 Feb 02 2016 rev 4 2024-03-14
suricata GPL NETBIOS SMB llsrpc unicode little endian bind attempt rev 5 2024-03-14
suricata ET MALWARE PawnStorm Java Class Stage 2 M2 Aug 28 2015 rev 3 2024-03-14
suricata ET WEB_CLIENT Samsung Galaxy Knox Android Browser RCE smdm attempt rev 5 2024-03-14
suricata ET PHISHING Generic Phishing Landing 2018-01-12 rev 2 2024-03-14
suricata ET MALWARE Evil JS Ransomware rev 3 2024-03-14
suricata ET WEB_CLIENT Evil Redirect Compromised WP Feb 01 2016 rev 6 2024-03-14
suricata ET ADWARE_PUP Suspicious Darkwave Popads Pop Under Redirect rev 3 2024-03-14
suricata ET CHAT GaduGadu Chat Server Available Status Packet rev 5 2024-03-14
suricata GPL NETBIOS SMB msqueue unicode little endian bind attempt rev 5 2024-03-14
suricata ET EXPLOIT_KIT Probable Sakura exploit kit landing page obfuscated applet tag Mar 28 2013 rev 5 2024-03-14
suricata ET INFO Adobe Flash Uncompressed in HTTP Flowbit Set rev 9 2024-03-14
suricata ET INFO Java Downloading Class flowbit no alert rev 8 2024-03-14
suricata ET CHAT IRC PING command rev 18 2024-03-14
suricata ET PHISHING Possible Free Mobile Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET PHISHING Possible OWA Mail Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET PHISHING Possible MyEtherWallet Phishing Landing - Title over non SSL rev 2 2024-03-14
suricata ET PHISHING Impots Phishing Landing 2018-03-28 rev 3 2024-03-14
suricata GPL NETBIOS SMB msqueue little endian bind attempt rev 5 2024-03-14
suricata ET MALWARE Downbot/Shady Rat Remote Shell Connection rev 5 2024-03-14
suricata ET PHISHING Possible Alibaba Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET EXPLOIT_KIT DRIVEBY Sednit EK IE Exploit CVE-2014-1776 M1 rev 5 2024-03-14
suricata ET PHISHING Successful Outlook Webmail Account Phish 2015-09-02 rev 4 2024-03-14
suricata ET EXPLOIT CVE-2018-8174 Common Construct B64 M2 rev 2 2024-03-14
suricata ET INFO Possible SSLv2 Negotiation in Progress Client Master Key SSL2_RC4_128_WITH_MD5 rev 3 2024-03-14
suricata ET PHISHING Mailbox Update Phishing Landing 2018-02-26 rev 2 2024-03-14
suricata GPL NETBIOS SMB nddeapi unicode bind attempt rev 7 2024-03-14
suricata ET PHISHING Email Verification/Upgrade Phishing Landing 2018-01-22 rev 2 2024-03-14
suricata ET PHISHING s0m3 Phishing Landing 2018-04-09 rev 3 2024-03-14
suricata ET INFO Radmin Remote Control Session Authentication Initiate rev 6 2024-03-14
suricata ET EXPLOIT_KIT StyX Landing Page rev 8 2024-03-14
suricata ET PHISHING Generic Credential Phishing Landing Aug 11 2015 rev 6 2024-03-14
suricata ET EXPLOIT Ghostscript setpattern type confusion attempt rev 2 2024-03-14
suricata ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2024-03-14
suricata ET PHISHING Wells Fargo Phishing Landing 2018-02-02 M2 rev 2 2024-03-14
suricata ET PHISHING Chase Phishing Landing 2018-02-15 rev 2 2024-03-14
suricata ET PHISHING Chalbhai Phishing Landing 2018-03-12 rev 2 2024-03-14