Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE ASCII Executable Inside of MSCOFF File DL Over HTTP rev 4 2024-03-14
suricata ET MALWARE NanoCore RAT Keepalive Response 1 rev 11 2024-03-14
suricata GPL EXPLOIT login buffer non-evasive overflow attempt rev 6 2024-03-14
suricata ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2024-03-14
suricata ET EXPLOIT_KIT Sweet Orange Landing with Applet Oct 4 2013 rev 8 2024-03-14
suricata ET PHISHING Generic Mailbox Phishing Landing 2018-08-30 rev 2 2024-03-14
suricata ET PHISHING Possible Successful Apple Phish 2015-07-27 rev 4 2024-03-14
suricata ET MALWARE PE EXE or DLL Windows file download Text M2 rev 3 2024-03-14
suricata ET MALWARE [ANY.RUN] Possible Gh0stRat Checkin rev 2 2024-03-14
suricata ET EXPLOIT_KIT Magnitude EK Landing M1 Aug 05 2017 rev 3 2024-03-14
suricata ET PHISHING Bank of America Phishing Landing 2018-04-19 rev 2 2024-03-14
suricata ET PHISHING Generic PhishKit Author Comment M6 2018-08-30 rev 2 2024-03-14
suricata ET WEB_CLIENT Fake Video Player Update Scam Oct 30 rev 4 2024-03-14
suricata ET MALWARE NanoCore RAT Keepalive 1 rev 3 2024-03-14
suricata GPL NETBIOS SMB winreg bind attempt rev 5 2024-03-14
suricata ET PHISHING TSB Bank / Lloyds Bank Phishing Landing 2018-02-01 rev 2 2024-03-14
suricata ET PHISHING AT&T Phishing Landing 2018-01-23 rev 3 2024-03-14
suricata ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 rev 4 2024-03-14
suricata ET INFO LDAPSv3 LDAPS_START_TLS Request Outbound rev 3 2024-03-14
suricata ET PHISHING Generic PhishKit Author Comment M3 2018-08-30 rev 2 2024-03-14
suricata ET MALWARE Linux/Moose NAT Traversal CnC Beacon - Sleep rev 4 2024-03-14
suricata ET PHISHING Paypal Phishing Landing 2018-01-03 rev 2 2024-03-14
suricata ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2024-03-14
suricata GPL NETBIOS SMB irot unicode bind attempt rev 5 2024-03-14
suricata ET MALWARE Socks5Systemz CnC Checkin M2 rev 2 2024-03-14
suricata GPL NETBIOS SMB-DS IActivation unicode little endian bind attempt rev 5 2024-03-14
suricata ET EXPLOIT Firefox 0-day used against TOR browser Nov 29 2016 M1 rev 3 2024-03-14
suricata ET PHISHING Mailbox Verification Phishing Landing 2018-01-31 rev 3 2024-03-14
suricata ET PHISHING Netflix Phishing Landing 2018-05-02 rev 3 2024-03-14
suricata ET PHISHING Anonisma Phishing Landing 2015-12-01 rev 3 2024-03-14
suricata ET PHISHING Outlook Webmail Phishing Landing 2015-11-21 rev 3 2024-03-14
suricata ET PHISHING Google Drive Phishing Landing 2018-02-07 rev 2 2024-03-14
suricata ET PHISHING Bank of America Phishing Landing 2018-01-30 rev 2 2024-03-14
suricata ET PHISHING Paypal Phishing Landing 2018-05-02 rev 2 2024-03-14
suricata ET HUNTING Possible EXE Download From Suspicious TLD rev 4 2024-03-14
suricata ET EXPLOIT_KIT Nuclear SilverLight Exploit rev 3 2024-03-14
suricata ET PHISHING Paypal Phishing Landing 2018-08-07 rev 2 2024-03-14
suricata ET INFO SMTP PDF Attachment Flowbit Set rev 5 2024-03-14
suricata ET PHISHING Wells Fargo Phishing Landing 2018-02-09 rev 2 2024-03-14
suricata ET PHISHING Possible Raiffeisen Bank Phishing Landing - Title over non SSL rev 3 2024-03-14