Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_CLIENT Microsoft Tech Support Scam M1 2016-09-15 rev 4 2024-03-07
suricata ET PHISHING USPS Phishing Landing 2016-02-10 rev 4 2024-03-07
suricata ET MALWARE Possible Pipka JS Skimmer - Skimmer Payload Observed M7 rev 3 2024-03-07
suricata ET EXPLOIT Possible Belkin N600DB Wireless Router Request Forgery Attempt rev 4 2024-03-07
suricata ET PHISHING Shared Document Phishing Landing Nov 16 2016 rev 4 2024-03-07
suricata ET PHISHING Successful Outlook Password Update Phish M3 2016-09-01 rev 4 2024-03-07
suricata ET EXPLOIT FTPShell client Stack Buffer Overflow rev 2 2024-03-07
suricata ET INFO HTTP Request to a *.co.be domain rev 7 2024-03-07
suricata ET PHISHING Possible barclays .co. uk Phishing Domain 2016-06-22 rev 8 2024-03-07
suricata ET MALWARE Inbound MonetizeUs/LNKR Struct rev 3 2024-03-07
suricata ET PHISHING Adobe Shared Document Phishing Landing M2 2016-08-31 rev 4 2024-03-07
suricata ET MALWARE [eSentire] Win32/Spy.Banker.ADIO CnC Checkin rev 2 2024-03-07
suricata ET PHISHING APT SWC PluginDetect Landing Cookie 2015-10-15 rev 6 2024-03-07
suricata ET EXPLOIT NTDump Session Established Reg-Entry port 139 rev 9 2024-03-07
suricata ET ADWARE_PUP Websearch.com Spyware rev 13 2024-03-07
suricata ET PHISHING Shipping Document Phishing Landing 2016-06-23 rev 5 2024-03-07
suricata ET PHISHING Possible Successful Ebay Phish Jan 30 2017 rev 5 2024-03-07
suricata ET WEB_SPECIFIC_APPS PHPNuke general SQL injection attempt rev 13 2024-03-07
suricata ET PHISHING Suspicious Redirect - Possible Phishing May 25 2016 rev 8 2024-03-07
suricata ET PHISHING IRS Phishing Landing 2016-01-15 rev 6 2024-03-07
suricata ET MALWARE ELF/Emptiness v2 XOR UDP Flood Command Inbound rev 2 2024-03-07
suricata ET VOIP Possible Misuse Call from MERA RTU rev 2 2024-03-07
suricata ET PHISHING Email Termination Phishing Landing 2016-06-22 rev 4 2024-03-07
suricata ET WEB_SPECIFIC_APPS Apache Tomcat Possible CVE-2017-12617 JSP Upload Bypass Attempt rev 7 2024-03-07
suricata ET WEB_SPECIFIC_APPS Apache Tomcat Possible CVE-2017-12617 JSP Upload Bypass Attempt rev 7 2024-03-07
suricata ET MALWARE Murlo Trojan Checkin rev 12 2024-03-07
suricata ET ADWARE_PUP Zenotecnico Adware 2 rev 9 2024-03-07
suricata ET MALWARE FastPOS Version Checkin rev 4 2024-03-07
suricata ET ATTACK_RESPONSE Windows SCM DLL Hijack Command Inbound via HTTP M2 rev 4 2024-03-07
suricata ET INFO Request for Jsecoin Browser Miner M2 rev 4 2024-03-07
suricata ET EXPLOIT Serialized Java Object Calling Common Collection Function rev 2 2024-03-07
suricata ET PHISHING Possible Linkedin Phishing Domain Dec 09 2016 rev 5 2024-03-07
suricata ET PHISHING Successful Phishing Attempt via GetGoPhish Phishing Tool rev 6 2024-03-07
suricata ET PHISHING Possible Paypal Phishing Domain Mar 14 2016 rev 7 2024-03-07
suricata ET MALWARE MageCart CnC Domain in SNI rev 4 2024-03-07
suricata ET PHISHING Possible Successful Apple Phishing Domain Feb 02 2017 rev 5 2024-03-07
suricata ET EXPLOIT Pwdump4 Session Established GetHash port 139 rev 5 2024-03-07
suricata ET PHISHING Possible Amazon Phishing Domain 2016-06-21 rev 7 2024-03-07
suricata ET MALWARE x0Proto File Info Request rev 2 2024-03-07
suricata ET PHISHING DHL Phishing Landing 2016-08-31 rev 4 2024-03-07