Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Square Phishing Landing 2018-02-15 rev 2 2024-03-14
suricata ET PHISHING Axie Infinity Credential Phish Landing Page M1 2022-05-18 rev 3 2024-03-14
suricata GPL NETBIOS SMB-DS IPC$ share access rev 10 2024-03-14
suricata ET WEB_CLIENT Generic Fake Support Phone Scam Mar 8 rev 4 2024-03-14
suricata ET PHISHING Paypal Phishing Landing 2018-05-09 rev 2 2024-03-14
suricata ET INFO JAVA - Java Serialized Data Download by Vulnerable Client rev 6 2024-03-14
suricata ET WEB_CLIENT pshell dl/execute primitives in wideb64 1 rev 3 2024-03-14
suricata ET GAMES Growtopia Hack - WrongGrow CnC Activity rev 2 2024-03-14
suricata ET EXPLOIT_KIT Terror EK Payload Download M2 Mar 14 2017 rev 2 2024-03-14
suricata ET PHISHING Dropbox Phishing Landing Feb 27 2017 rev 3 2024-03-14
suricata GPL NETBIOS SMB llsrpc little endian bind attempt rev 5 2024-03-14
suricata ET PHISHING Free Mobile Phishing Landing 2018-08-07 rev 2 2024-03-14
suricata ET EXPLOIT_KIT Sweet Orange Landing with Applet Sep 30 2013 rev 9 2024-03-14
suricata GPL NETBIOS SMB ISystemActivator unicode little endian bind attempt rev 5 2024-03-14
suricata ET PHISHING Possible AOL Mail Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET PHISHING Mailbox Renewal Phish Landing 2015-08-14 rev 5 2024-03-14
suricata ET PHISHING Wells Fargo Phishing Landing 2018-02-13 rev 2 2024-03-14
suricata ET PHISHING Capital One Phishing Landing 2018-02-13 M1 rev 3 2024-03-14
suricata ET PHISHING Facebook Phishing Landing 2018-04-09 rev 2 2024-03-14
suricata ET EXPLOIT CVE-2017-0199 Common Obfus Stage 2 DL rev 3 2024-03-14
suricata ET HUNTING Generic CollectGarbage in Hex rev 7 2024-03-14
suricata ET PHISHING Facebook Phishing Landing 2018-02-13 M2 rev 3 2024-03-14
suricata GPL NETBIOS SMB IActivation unicode bind attempt rev 5 2024-03-14
suricata ET WEB_CLIENT DXF Extension File Detection Access Flowbit Set rev 3 2024-03-14
suricata ET EXPLOIT_KIT SNET EK Encoded VBS 3 rev 4 2024-03-14
suricata ET PHISHING Possible Apple Store Phish Landing 2015-07-30 rev 4 2024-03-14
suricata ET MALWARE Mystic Stealer C2 Client Hello Packet rev 4 2024-03-14
suricata ET MALWARE VirRansom/VirLock Checkin Response rev 4 2024-03-14
suricata ET PHISHING DHL Phishing Landing 2016-07-11 rev 4 2024-03-14
suricata ET PHISHING Retrieve Pending Emails Phishing Landing 2018-03-12 rev 2 2024-03-14
suricata ET MALWARE Linux/Moose NAT Traversal CnC Beacon - Multiple Tunnel rev 4 2024-03-14
suricata ET EXPLOIT_KIT Disdain EK Flash Exploit M2 Aug 23 2017 rev 3 2024-03-14
suricata GPL CHAT IRC DCC chat request rev 12 2024-03-14
suricata ET PHISHING Microsoft Live Login Phishing Landing 2018-02-01 rev 2 2024-03-14
suricata ET PHISHING Possible Adobe ID Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET EXPLOIT Shenzhen TVT DVR/NVR/IPC Hardcoded Credential ConfigSyncProc Login Attempt rev 2 2024-03-14
suricata GPL NETBIOS SMB-DS irot bind attempt rev 5 2024-03-14
suricata ET EXPLOIT_KIT Unknown EK Landing Feb 16 2015 b64 2 M2 rev 4 2024-03-14
suricata ET EXPLOIT CVE-2018-8174 Common Construct B64 M2 rev 2 2024-03-14
suricata ET EXPLOIT_KIT Nuclear EK Gate Injected iframe Oct 22 2014 rev 4 2024-03-14