Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata GPL CHAT Jabber/Google Talk Outgoing Traffic rev 4 2024-03-08
suricata GPL FTP invalid MDTM command attempt rev 9 2024-03-08
sigma OpenCanary - SSH Login Attempt test 2024-03-08
sigma OpenCanary - NTP Monlist Request test 2024-03-08
sigma OpenCanary - SMB File Open Request test 2024-03-08
sigma OpenCanary - VNC Connection Attempt test 2024-03-08
sigma OpenCanary - TFTP Request test 2024-03-08
sigma OpenCanary - SIP Request test 2024-03-08
sigma OpenCanary - SNMP OID Request test 2024-03-08
sigma OpenCanary - Telnet Login Attempt test 2024-03-08
sigma OpenCanary - REDIS Action Command Attempt test 2024-03-08
sigma OpenCanary - SSH New Connection Attempt test 2024-03-08
sigma OpenCanary - FTP Login Attempt test 2024-03-08
sigma OpenCanary - GIT Clone Request test 2024-03-08
sigma OpenCanary - HTTP GET Request test 2024-03-08
sigma OpenCanary - HTTP POST Login Attempt test 2024-03-08
sigma OpenCanary - HTTPPROXY Login Attempt test 2024-03-08
sigma OpenCanary - MSSQL Login Attempt Via SQLAuth test 2024-03-08
sigma OpenCanary - MSSQL Login Attempt Via Windows Authentication test 2024-03-08
sigma OpenCanary - MySQL Login Attempt test 2024-03-08
snort ET TROJAN DFKRAT CnC Checkin M1 rev 1 2024-03-07
snort ET TROJAN DFKRAT CnC Checkin M3 rev 1 2024-03-07
snort ET TROJAN DFKRAT CnC Checkin M2 rev 1 2024-03-07
snort ET TROJAN Splinter Red Team Tool Activity rev 1 2024-03-07
suricata ET PHISHING Possible Successful Bank of America Phishing Domain Feb 02 2017 rev 5 2024-03-07
suricata ET MALWARE Locky Ransomware Renaming File via SMB rev 2 2024-03-07
suricata ET EXPLOIT Possible ECLIPSEDWING MS08-067 rev 2 2024-03-07
suricata ET MALWARE REvil Exfil SFTP Certificate Inbound rev 2 2024-03-07
suricata ET PHISHING Successful CIBC Phish 2016-08-30 rev 4 2024-03-07
suricata ET PHISHING Possible Successful USAA Phishing Domain Feb 02 2017 rev 5 2024-03-07
suricata ET PHISHING Successful Amazon Phish 2016-10-27 rev 9 2024-03-07
suricata ET EXPLOIT Possible ETERNALBLUE Exploit M3 MS17-010 rev 4 2024-03-07
suricata ET MALWARE Dialer.Trojan Activity rev 7 2024-03-07
suricata ET PHISHING Successful Squirrelmail Phishing 2015-11-20 rev 6 2024-03-07
suricata ET EXPLOIT ETERNALBLUE Probe Vulnerable System Response MS17-010 rev 4 2024-03-07
suricata ET PHISHING Successful Square Phish Nov 16 2015 rev 6 2024-03-07
suricata ET PHISHING Phishing Landing via Weebly.com M2 2016-02-02 rev 6 2024-03-07
suricata ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing rev 5 2024-03-07
suricata ET PHISHING Successful Chase Phishing 2016-12-12 rev 5 2024-03-07
suricata ET MALWARE Likely Malicious Windows SCT Download MSXMLHTTP M2 rev 5 2024-03-07