Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Mailbox Verification Phishing Landing 2018-01-31 rev 3 2024-03-14
suricata ET MALWARE SharpExec EXE Lateral Movement Tool Downloaded rev 2 2024-03-14
suricata ET EXPLOIT_KIT Spelevo EK Landing M2 rev 2 2024-03-14
suricata ET PHISHING Possible Raiffeisen Bank Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET PHISHING Successful Commonwealth Bank Phish Fake Error Page 2015-08-20 rev 5 2024-03-14
suricata GPL NETBIOS SMB-DS IActivation unicode bind attempt rev 5 2024-03-14
suricata ET MALWARE Likely Trojan Multi-part Macro Download M1 rev 4 2024-03-14
suricata ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2024-03-14
suricata ET WEB_CLIENT Google Chrome Pdfium JPEG2000 Heap Overflow rev 3 2024-03-14
suricata ET PHISHING Paypal Phishing Landing 2018-05-09 rev 2 2024-03-14
suricata ET CHAT GaduGadu Chat Server Welcome Packet rev 7 2024-03-14
suricata ET PHISHING Badoo Phishing Landing 2018-07-19 rev 4 2024-03-14
suricata ET WEB_CLIENT Malicious SCF File Inbound rev 4 2024-03-14
suricata ET PHISHING Possible Capital One Phishing Landing - Title over non SSL rev 2 2024-03-14
suricata ET PHISHING Possible Successful Apple Phish 2015-07-27 rev 4 2024-03-14
suricata GPL NETBIOS SMB-DS msqueue unicode bind attempt rev 5 2024-03-14
suricata ET MALWARE PE EXE or DLL Windows file download Text M2 rev 3 2024-03-14
suricata ET PHISHING Possible Dropbox Phishing Landing - Title over non SSL rev 4 2024-03-14
suricata GPL NETBIOS SMB-DS msqueue bind attempt rev 5 2024-03-14
suricata ET EXPLOIT_KIT SunDown EK RIP Landing M1 B642 rev 3 2024-03-14
suricata ET INFO JAVA - Java Serialized Data Download rev 6 2024-03-14
suricata ET MALWARE Possible DarkHotel Landing M1 rev 4 2024-03-14
suricata ET WEB_CLIENT pshell dl/execute primitives in wideb64 5 rev 3 2024-03-14
suricata ET PHISHING Excel/Adobe Online Phishing Landing Nov 25 2015 rev 5 2024-03-14
suricata ET INFO SMB Executable File Transfer rev 3 2024-03-14
suricata ET INFO Onion/TOR Proxy Client Request rev 3 2024-03-14
suricata GPL NETBIOS SMB-DS irot little endian bind attempt rev 5 2024-03-14
suricata ET PHISHING Successful Survey Credential Phish 2015-08-12 rev 5 2024-03-14
suricata ET PHISHING GitLab Phishing Landing 2018-07-19 rev 3 2024-03-14
suricata ET EXPLOIT_KIT SunDown EK RIP Landing M4 B642 rev 3 2024-03-14
suricata ET MALWARE JS/Nemucod.M.gen downloading EXE payload rev 3 2024-03-14
suricata ET EXPLOIT_KIT Unknown EK Landing Feb 16 2015 b64 2 M1 rev 3 2024-03-14
suricata GPL NETBIOS DCERPC irot bind attempt rev 4 2024-03-14
suricata ET EXPLOIT_KIT Spelevo EK Landing M1 rev 3 2024-03-14
suricata GPL NETBIOS SMB-DS irot unicode bind attempt rev 5 2024-03-14
suricata ET MALWARE VirRansom/VirLock Checkin rev 3 2024-03-14
suricata GPL NETBIOS SMB-DS winreg create tree attempt rev 9 2024-03-14
suricata ET PHISHING Paypal Phishing Landing 2018-01-29 rev 2 2024-03-14
suricata ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1 rev 4 2024-03-14
suricata ET EXPLOIT_KIT Cool Exploit Kit Plugin-Detect July 08 2013 rev 4 2024-03-14