Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_CLIENT PDF With Hidden Embedded File rev 3 2024-03-14
suricata ET EXPLOIT_KIT ScanBox Jun 06 2015 M3 T1 rev 4 2024-03-14
suricata ET PHISHING Possible Chase Phishing Landing - Title over non SSL rev 2 2024-03-14
suricata ET EXPLOIT_KIT Possible Java Applet JNLP applet_ssv_validated in Base64 rev 7 2024-03-14
suricata ET MOBILE_MALWARE Possible Android CVE-2014-6041 rev 5 2024-03-14
suricata ET EXPLOIT ZBL EPON ONU Broadband Router Remote Privilege Escalation - Responding with Superuser Credentials rev 2 2024-03-14
suricata ET MALWARE Parallax CnC Response Activity M7 rev 3 2024-03-14
suricata GPL NETBIOS DCERPC IActivation little endian bind attempt rev 4 2024-03-14
suricata ET EXPLOIT F5 BIG-IP rsync cmi authorized_keys access attempt rev 6 2024-03-14
suricata ET PHISHING Generic PhishKit Author Comment M2 2018-08-30 rev 2 2024-03-14
suricata ET PHISHING Badoo Phishing Landing 2018-07-19 rev 4 2024-03-14
suricata GPL NETBIOS SMB-DS llsrpc bind attempt rev 5 2024-03-14
suricata GPL NETBIOS SMB IPC$ unicode share access rev 18 2024-03-14
suricata ET MALWARE DarkComet-RAT init connection rev 6 2024-03-14
suricata GPL NETBIOS SMB-DS msqueue unicode bind attempt rev 5 2024-03-14
suricata ET EXPLOIT Ecessa WANWorx WVR-30 Cross-Site Request Forgery rev 2 2024-03-14
suricata ET MALWARE Magniber Ransomware Retrieving Instructions rev 2 2024-03-14
suricata ET PHISHING Paypal Phishing Landing 2018-05-09 rev 2 2024-03-14
suricata ET EXPLOIT_KIT SunDown EK RIP Landing M1 B642 rev 3 2024-03-14
suricata ET EXPLOIT_KIT DRIVEBY Sednit EK IE Exploit CVE-2013-1347 M1 rev 4 2024-03-14
suricata ET PHISHING Successful Adobe Phish M3 2016-07-11 rev 4 2024-03-14
suricata ET PHISHING Mailbox Verification Phishing Landing 2018-01-31 rev 3 2024-03-14
suricata ET PHISHING Possible Capital One Phishing Landing - Title over non SSL rev 2 2024-03-14
suricata ET PHISHING Netflix Phishing Landing 2018-05-09 rev 2 2024-03-14
suricata GPL NETBIOS SMB-DS DCERPC LSASS unicode bind attempt rev 10 2024-03-14
suricata ET INFO Possible SSLv2 Negotiation in Progress Server Hello rev 3 2024-03-14
suricata ET EXPLOIT Possible ETERNALROMANCE MS17-010 rev 3 2024-03-14
suricata ET WEB_CLIENT Google Chrome Pdfium JPEG2000 Heap Overflow rev 3 2024-03-14
suricata ET MALWARE Socks5Systemz CnC Checkin M2 rev 2 2024-03-14
suricata ET PHISHING Outlook Webmail Phishing Landing 2015-11-21 rev 3 2024-03-14
suricata ET EXPLOIT Ghostscript invalidcheck escape attempt rev 2 2024-03-14
suricata ET MALWARE Possible Malicious Gzip PowerShell over HTTP rev 3 2024-03-14
suricata ET PHISHING Netflix Phishing Landing 2018-05-02 rev 3 2024-03-14
suricata ET WEB_CLIENT pshell dl/execute primitives in wideb64 6 rev 2 2024-03-14
suricata ET PHISHING LinkedIn Phishing Landing 2018-02-09 M1 rev 3 2024-03-14
suricata ET CHAT GaduGadu Chat Server Welcome Packet rev 7 2024-03-14
suricata ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response rev 3 2024-03-14
suricata ET WEB_CLIENT Malicious SCF File Inbound rev 4 2024-03-14
suricata ET PHISHING Generic PhishKit Author Comment M10 2018-08-30 rev 2 2024-03-14
suricata ET EXPLOIT Possible SAP NetWeaver CVE-2020-6287 Exploit Success rev 3 2024-03-14