Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Possible Scotiabank Phishing Landing - Title over non SSL rev 2 2024-03-14
suricata ET EXPLOIT Shenzhen TVT DVR/NVR/IPC Hardcoded Credential ConfigSyncProc Login Attempt rev 2 2024-03-14
suricata ET PHISHING Possible Capitech Internet Banking Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET EXPLOIT Possible SAP NetWeaver CVE-2020-6287 Probe rev 3 2024-03-14
suricata ET PHISHING Generic PhishKit Author Comment M7 2018-08-30 rev 2 2024-03-14
suricata ET WEB_CLIENT Microsoft Excel file download - SET 1 rev 9 2024-03-14
suricata GPL NETBIOS SMB-DS DCERPC LSASS bind attempt rev 10 2024-03-14
suricata ET WEB_CLIENT DRIVEBY Generic URLENCODED CollectGarbage rev 5 2024-03-14
suricata ET CHAT IRC PONG response rev 22 2024-03-14
suricata GPL NETBIOS SMB ISystemActivator unicode bind attempt rev 5 2024-03-14
suricata GPL NETBIOS SMB winreg unicode create tree attempt rev 11 2024-03-14
suricata ET EXPLOIT_KIT SunDown EK RIP Landing M4 B641 rev 3 2024-03-14
suricata ET INFO Possible SSLv2 Negotiation in Progress ClientMaster Key SSL2_IDEA_128_CBC_WITH_MD5 rev 3 2024-03-14
suricata ET EXPLOIT CVE-2018-8174 Common Construct B64 M3 rev 2 2024-03-14
suricata ET PHISHING Capital One Phishing Landing 2018-02-13 M2 rev 2 2024-03-14
suricata ET PHISHING Possible Apple Store Phish Landing 2015-07-30 rev 4 2024-03-14
suricata ET EXPLOIT_KIT Disdain EK Flash Exploit M2 Aug 23 2017 rev 3 2024-03-14
suricata ET PHISHING Facebook Phishing Landing 2018-02-13 M2 rev 3 2024-03-14
suricata ET EXPLOIT_KIT Unknown EK Secondary Landing Page May 01 2015 M1 rev 3 2024-03-14
suricata ET PHISHING Wells Fargo Phishing Landing 2018-02-02 M6 rev 2 2024-03-14
suricata ET WEB_CLIENT [eSentire] Fake Flash Update 2018-07-09 rev 2 2024-03-14
suricata ET WEB_CLIENT DRIVEBY GENERIC ShellExecute in URLENCODE rev 3 2024-03-14
suricata ET PHISHING Hellion Postmaster Phishing Landing 2018-01-31 rev 2 2024-03-14
suricata ET EXPLOIT_KIT Unknown EK Landing Feb 16 2015 b64 2 M2 rev 4 2024-03-14
suricata ET PHISHING Wells Fargo Phishing Landing 2018-02-01 rev 2 2024-03-14
suricata ET INFO Vulnerable Java Version 9.x Detected rev 5 2024-03-14
suricata ET PHISHING DHL Phishing Landing 2018-04-09 rev 2 2024-03-14
suricata ET EXPLOIT F5 BIG-IP rsync cmi authorized_keys successful upload rev 5 2024-03-14
suricata ET MALWARE WaterDropX PRISM CnC Checkin rev 3 2024-03-14
suricata ET WEB_CLIENT pshell dl/execute primitives in wideb64 2 rev 3 2024-03-14
suricata ET PHISHING Retrieve Pending Emails Phishing Landing 2018-03-12 rev 2 2024-03-14
suricata ET EXPLOIT Possible Android Stagefright MP4 CVE-2015-1538 - Shell rev 4 2024-03-14
suricata ET PHISHING Apple ID Phishing Landing 2015-08-19 rev 4 2024-03-14
suricata ET WEB_SERVER Generic WSO Webshell Password Prompt Accessed on Internal Compromised Server rev 3 2024-03-14
suricata ET PHISHING Successful Horde Webmail Phish 2015-08-21 rev 7 2024-03-14
suricata ET PHISHING Facebook Phishing Landing 2018-04-09 rev 2 2024-03-14
suricata ET EXPLOIT_KIT Terror EK CVE-2015-2419 Exploit rev 3 2024-03-14
suricata ET EXPLOIT Possible MeltDown PoC Download In Progress rev 3 2024-03-14
suricata ET PHISHING Linkedin Phishing Landing 2018-08-30 rev 2 2024-03-14
suricata ET PHISHING Yahoo Account Verification Phishing Landing 2018-02-05 rev 2 2024-03-14