Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Possible Phishing Landing - Tectite Web Form Abuse rev 4 2024-03-07
suricata ET MALWARE Murlo Trojan Checkin rev 12 2024-03-07
suricata ET PHISHING Suspicious Redirect - Possible Phishing May 25 2016 rev 8 2024-03-07
suricata ET PHISHING [eSentire] Successful Personalized Phish 2018-06-15 rev 3 2024-03-07
suricata ET PHISHING Successful Mailbox Update Credential Phish 2015-10-02 rev 6 2024-03-07
suricata ET PHISHING Successful Paypal Phish M2 2016-12-13 rev 4 2024-03-07
suricata ET EXPLOIT Apache Struts memberAccess and opensymphony inbound OGNL injection remote code execution attempt rev 4 2024-03-07
suricata ET ADWARE_PUP Clickspring.net Spyware Reporting Successful Install rev 11 2024-03-07
suricata ET WEB_CLIENT Tech Support Phone Scam Landing M2 2016-08-12 rev 4 2024-03-07
suricata ET EXPLOIT_KIT Possible Router EK Landing Page Inbound 2019-05-24 rev 4 2024-03-07
suricata ET PHISHING Successful TeamIPwned Phish 2016-08-30 rev 4 2024-03-07
suricata ET PHISHING Chalbhai Phishing Landing Feb 18 2016 rev 7 2024-03-07
suricata ET WEB_SPECIFIC_APPS PHPNuke general SQL injection attempt rev 13 2024-03-07
suricata ET PHISHING Email Termination Phishing Landing 2016-06-22 rev 4 2024-03-07
suricata ET PHISHING DHL Phishing Landing 2016-08-31 rev 4 2024-03-07
suricata ET MALWARE ELF/Emptiness v2 XOR HTTP Flood Command Inbound rev 2 2024-03-07
suricata ET MALWARE Brazilian Banker SSL Cert rev 4 2024-03-07
suricata ET PHISHING Paypal Phishing Redirect M1 Feb 24 2017 rev 5 2024-03-07
suricata ET PHISHING Possible Phishing Landing via Moonfruit M2 2016-10-03 rev 4 2024-03-07
suricata ET PHISHING Successful Phish Fake Document Loading Error 2015-07-27 rev 7 2024-03-07
suricata ET PHISHING Successful Mailbox Upgrade Phish 2016-06-27 M1 rev 4 2024-03-07
suricata ET PHISHING Successful Mailbox Deactivation Phish 2016-12-15 rev 4 2024-03-07
suricata ET PHISHING Successful Outlook Phish 2016-07-14 rev 5 2024-03-07
suricata ET PHISHING Successful Google Drive Phish 2016-08-18 rev 5 2024-03-07
suricata ET MALWARE DFKRAT CnC Checkin M2 rev 1 2024-03-07
suricata ET MALWARE Arechclient2 Backdoor CnC Keep-Alive rev 3 2024-03-07
suricata ET ADWARE_PUP Outerinfo.com Spyware Advertising Campaign Download rev 10 2024-03-07
suricata ET PHISHING Targeted Office 365 Phishing Landing 2016-08-23 rev 4 2024-03-07
suricata ET MALWARE REvil Exfil SFTP Certificate Inbound rev 2 2024-03-07
suricata ET MOBILE_MALWARE Android Golden Rat Checkin rev 2 2024-03-07
suricata ET PHISHING Paypal Phishing Landing Feb 24 2017 rev 5 2024-03-07
suricata ET PHISHING Phishing Landing via Tripod.com M1 2016-03-31 rev 5 2024-03-07
suricata ET WEB_SERVER Possible Apache Struts OGNL Expression Injection rev 4 2024-03-07
suricata ET PHISHING Phishing Landing via Weebly.com M4 2016-02-02 rev 6 2024-03-07
suricata ET PHISHING Phishing Landing via Weebly.com M3 2016-02-02 rev 6 2024-03-07
suricata ET PHISHING Apple Phishing Landing M2 Sep 14 2017 rev 3 2024-03-07
suricata ET PHISHING DHL/EMS Documents Phishing Landing 2016-08-10 rev 4 2024-03-07
suricata ET PHISHING Generic Webmail Phishing Landing rev 3 2024-03-07
suricata ET INFO Dameware Remote Control Service Install rev 6 2024-03-07
suricata ET EXPLOIT AVTECH Authenticated Command Injection in adcommand.cgi rev 3 2024-03-07