Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Banamex Bank Phish 2016-12-29 rev 4 2024-03-07
suricata ET PHISHING Phishing Landing via Webeden.co.uk M1 2016-01-22 rev 6 2024-03-07
suricata ET WEB_CLIENT Tech Support Scam Landing M1 2019-04-15 rev 5 2024-03-07
suricata ET ADWARE_PUP Casino on Net Reporting Data rev 12 2024-03-07
suricata ET EXPLOIT ASUS RT-N56U/RT-AC66U Remote Code Execution rev 3 2024-03-07
suricata ET INFO Possible winexe over SMB - Possible Lateral Movement rev 4 2024-03-07
suricata ET PHISHING Phishing Landing via MyFreeSites.com M2 2016-03-31 rev 4 2024-03-07
suricata ET MALWARE Possible Pipka JS Skimmer - Skimmer Payload Observed M6 rev 3 2024-03-07
suricata ET PHISHING Dropbox Phishing Landing May 31 2017 rev 4 2024-03-07
suricata ET INFO ABBCCoin Checkin rev 2 2024-03-07
suricata ET PHISHING Microsoft Live Email Account Phishing Landing Mar 16 2017 rev 4 2024-03-07
suricata ET ADWARE_PUP 180solutions Spyware Keywords Download rev 13 2024-03-07
suricata ET EXPLOIT Pwdump3e pwservice.exe Access port 139 rev 9 2024-03-07
suricata ET PHISHING Successful Tectite Web Form Submission - Possible Phishing rev 4 2024-03-07
suricata ET ADWARE_PUP Outerinfo.com Spyware Checkin rev 8 2024-03-07
suricata ET INFO Base64 Encoded powershell.exe in HTTP Response M3 rev 5 2024-03-07
suricata ET PHISHING [eSentire] Successful Generic Phish 2018-06-15 rev 3 2024-03-07
suricata ET INFO IP Logger Redirect Domain in SNI rev 4 2024-03-07
suricata ET PHISHING Successful Paypal Phish M2 2015-11-03 rev 7 2024-03-07
suricata ET PHISHING Javascript XOR Encoding - Observed in Apple Phishing 2016-12-09 rev 4 2024-03-07
suricata ET EXPLOIT NTDump Session Established Reg-Entry port 445 rev 8 2024-03-07
suricata ET MALWARE CSharp SMB Scanner Assembly in PowerShell Inbound M1 rev 5 2024-03-07
suricata ET HUNTING Possible Covid19 Themed Email Spam Outbound M6 rev 3 2024-03-07
suricata ET MALWARE FastPOS Reporting Error Code rev 4 2024-03-07
suricata ET HUNTING SUSPICIOUS Excel Add-in Download M2 rev 4 2024-03-07
suricata ET PHISHING Successful Paypal Phish M1 2016-01-19 rev 4 2024-03-07
suricata ET PHISHING Successful Microsoft Live Email Account Phish 2016-09-08 rev 4 2024-03-07
suricata ET ADWARE_PUP Deskwizz.com Spyware Install INI Download rev 8 2024-03-07
suricata ET PHISHING Canada Revenue Agency Phishing Landing 2016-01-25 rev 5 2024-03-07
suricata ET MALWARE [Fireeye] Backdoor.BEACON M3 rev 3 2024-03-07
suricata ET MALWARE Shamoon v3 32bit Propagating Internally via SMB rev 4 2024-03-07
suricata ET PHISHING Successful Amazon Phish 2015-09-22 rev 4 2024-03-07
suricata ET MALWARE Splinter Red Team Tool Activity rev 1 2024-03-07
suricata ET PHISHING Successful Supplier Portal Phish 2016-10-07 rev 4 2024-03-07
suricata ET PHISHING Webmail Update Phishing Landing 2016-01-15 rev 4 2024-03-07
suricata ET MALWARE CenterPOS Delete Plugins rev 4 2024-03-07
suricata ET PHISHING Fedex Javascript Phishing Landing 2016-09-08 rev 4 2024-03-07
suricata ET PHISHING Successful Mailbox Update Credential Phish 2015-10-02 rev 6 2024-03-07
suricata ET PHISHING Successful Paypal Phish 2016-08-30 rev 4 2024-03-07
suricata ET PHISHING Successful Generic Phish 2016-10-27 rev 5 2024-03-07