Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
sigma Potential Arbitrary Command Execution Using Msdt.EXE test 2024-03-13
sigma IIS Native-Code Module Command Line Installation test 2024-03-13
sigma Diskshadow Script Mode Execution test 2024-03-13
sigma Rundll32 Internet Connection test 2024-03-13
sigma Suspicious Cabinet File Execution Via Msdt.EXE test 2024-03-13
sigma Network Connection Initiated By PowerShell Process test 2024-03-13
sigma Replace.exe Usage test 2024-03-13
sigma Changing Existing Service ImagePath Value Via Reg.EXE test 2024-03-13
sigma Exports Critical Registry Keys To a File test 2024-03-13
sigma Imports Registry Key From an ADS test 2024-03-13
sigma Exports Registry Key To a File test 2024-03-13
sigma Loaded Module Enumeration Via Tasklist.EXE test 2024-03-13
sigma Imports Registry Key From a File test 2024-03-13
snort ET TROJAN Andariel/TA430 Related TigerRAT Client Checkin rev 1 2024-03-12
snort ET TROJAN Win32/Adware.Adposhel.A Checkin M6 rev 3 2024-03-12
snort ET TROJAN Andariel/TA430 Related TigerRAT Client Checkin Response Activity rev 1 2024-03-12
suricata ET INFO ApacheBenchmark Tool User-Agent Detected rev 11 2024-03-12
suricata ET MALWARE Andariel/TA430 Related TigerRAT Client Checkin rev 1 2024-03-12
suricata ET MALWARE Backdoor.Win32.Ixeshe rev 9 2024-03-12
suricata ET MALWARE Evil Google Drive Download rev 4 2024-03-12
suricata ET GAMES Multiple Game Cheat Application Activity rev 2 2024-03-12
suricata ET GAMES Multiple Game Cheat Application Activity rev 2 2024-03-12
suricata ET MALWARE FlashBack Mac OSX malware Checkin rev 8 2024-03-12
suricata ET USER_AGENTS BeeMovie Related Activity rev 4 2024-03-12
suricata ET MALWARE Pandemiya User-Agent rev 6 2024-03-12
suricata ET MALWARE Possible KONNI CnC Activity rev 4 2024-03-12
suricata ET MALWARE Observed Win32/SVCReady Loader User-Agent rev 2 2024-03-12
suricata ET MALWARE Andariel/TA430 Related TigerRAT Client Checkin Response Activity rev 1 2024-03-12
suricata ET MALWARE Observed Win32/Ymacco.AA36 User-Agent rev 2 2024-03-12
suricata ET MALWARE TheTrick Banking Trojan User-Agent rev 6 2024-03-12
sigma Potentially Suspicious Wuauclt Network Connection test 2024-03-12
sigma Outbound Network Connection To Public IP Via Winlogon test 2024-03-12
sigma RDP Over Reverse SSH Tunnel test 2024-03-12
sigma Potentially Suspicious Malware Callback Communication test 2024-03-12
sigma Microsoft VBA For Outlook Addin Loaded Via Outlook test 2024-03-12
sigma Communication To Uncommon Destination Ports test 2024-03-12
sigma Microsoft Sync Center Suspicious Network Connections test 2024-03-12
sigma Dfsvc.EXE Network Connection To Non-Local IPs test 2024-03-12
snort ET TROJAN Win32/Unknown InfoStealer CnC Checkin rev 1 2024-03-11
suricata ET MALWARE Fake Opera 8.11 UA related to Trojan Activity rev 5 2024-03-11