Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET ADWARE_PUP Websearch.com Spyware rev 13 2024-03-07
suricata ET PHISHING Suspicious Redirect - Possible Phishing May 25 2016 rev 8 2024-03-07
suricata ET MALWARE Murlo Trojan Checkin rev 12 2024-03-07
suricata ET EXPLOIT NetGain Enterprise Manager 7.2.562 Ping Command Injection rev 4 2024-03-07
suricata ET PHISHING Wells Fargo Mobile Phishing Landing 2016-08-01 rev 4 2024-03-07
suricata ET PHISHING Possible Phishing Landing via Moonfruit M2 2016-10-03 rev 4 2024-03-07
suricata ET PHISHING Successful Raiffeisen Phish Nov 03 2017 rev 3 2024-03-07
suricata ET MALWARE x0Proto File Info Request rev 2 2024-03-07
suricata ET PHISHING Successful Bank of Scotland Phish M1 2015-11-05 rev 5 2024-03-07
suricata ET ATTACK_RESPONSE Windows SCM DLL Hijack Command Inbound via HTTP M2 rev 4 2024-03-07
suricata ET PHISHING INTERAC Payment Multibank Phishing Landing Mar 14 2017 rev 4 2024-03-07
suricata ET WEB_SPECIFIC_APPS Apache Tomcat Possible CVE-2017-12617 JSP Upload Bypass Attempt rev 7 2024-03-07
suricata ET PHISHING Possible Phishing Landing via MoonFruit.com M2 2016-01-22 rev 5 2024-03-07
suricata ET PHISHING Yahoo Password Strength Phishing Landing 2016-08-24 rev 4 2024-03-07
suricata ET INFO Unconfigured nginx Access rev 5 2024-03-07
suricata ET WEB_CLIENT Tech Support Phone Scam Landing M2 2016-08-12 rev 4 2024-03-07
suricata ET PHISHING Apple Suspended Account Phishing Landing Aug 09 2016 rev 5 2024-03-07
suricata ET PHISHING Successful Chase Phish 2016-12-13 rev 4 2024-03-07
suricata ET PHISHING Successful OWA Phish Apr 25 2017 rev 4 2024-03-07
suricata ET MALWARE ELF/Mirai Variant CnC Activity rev 2 2024-03-07
suricata ET HUNTING Suspicious VNC Remote Admin Request rev 2 2024-03-07
suricata ET EXPLOIT D-Link DCS-930L Remote Command Execution attempt rev 4 2024-03-07
suricata ET EXPLOIT_KIT Possible Router EK Landing Page Inbound 2019-05-24 rev 4 2024-03-07
suricata ET EXPLOIT AsusWRT RT-AC750GF Cross-Site Request Forgery rev 6 2024-03-07
suricata ET PHISHING Successful Wells Fargo Account Phish 2015-08-14 rev 7 2024-03-07
suricata ET PHISHING Suspicious Minimal HTTP Refresh to Googledrive.com - Possible Phishing rev 4 2024-03-07
suricata ET PHISHING Stripe Phishing Landing Dec 09 2016 rev 5 2024-03-07
suricata ET MALWARE Possible Linux.Mirai DaHua Default Credentials Login rev 2 2024-03-07
suricata ET EXPLOIT D-Link 850L Password Extract Attempt rev 4 2024-03-07
suricata ET EXPLOIT Pwdump3e Password Hash Retrieval port 139 rev 11 2024-03-07
suricata ET PHISHING PhishMe.com Phishing Landing Exercise rev 7 2024-03-07
suricata ET HUNTING EXE Base64 Encoded potential malware rev 3 2024-03-07
suricata ET PHISHING Successful Google Drive Phish 2016-08-18 rev 5 2024-03-07
suricata ET ATTACK_RESPONSE Windows SCM DLL Hijack Command Inbound via HTTP M3 rev 4 2024-03-07
suricata ET PHISHING Successful Generic Redeye Phish 2020-07-24 rev 3 2024-03-07
suricata ET WEB_SPECIFIC_APPS Apache Struts java.lang inbound OGNL injection remote code execution attempt rev 3 2024-03-07
suricata ET PHISHING Observed Possible Phishing Landing Page 2021-06-25 rev 3 2024-03-07
suricata ET EXPLOIT Serialized Java Object Calling Common Collection Function rev 2 2024-03-07
suricata ET WEB_SPECIFIC_APPS Netgear WNR2000v5 Possible Serial Number Leak rev 4 2024-03-07
suricata ET PHISHING Suspicious HTML Hex Obfuscated Title - Possible Phishing Landing Jun 28 2017 rev 4 2024-03-07