Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_CLIENT JS ShellWindows/AddInProcess Win10 DeviceGuardBypass Inbound rev 3 2024-03-07
suricata ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init rev 3 2024-03-07
suricata ET WEB_SERVER Possible Apache Struts OGNL Expression Injection rev 4 2024-03-07
suricata ET MOBILE_MALWARE Android Golden Rat Checkin rev 2 2024-03-07
suricata ET ADWARE_PUP Clickspring.net Spyware Reporting rev 11 2024-03-07
suricata ET PHISHING Successful Craigslist Phish 2016-07-11 rev 7 2024-03-07
suricata ET WEB_CLIENT Tech Support Phone Scam Landing M5 Jun 3 rev 5 2024-03-07
suricata ET EXPLOIT Possible Oracle Identity Manager Attempt to Logon with default account rev 5 2024-03-07
suricata ET PHISHING Successful Webmail Validator Phish M2 2016-09-02 rev 4 2024-03-07
suricata ET CURRENT_EVENTS [Fireeye] Backdoor.HTTP.BEACON.[CSBundle USAToday Server] rev 4 2024-03-07
suricata ET MALWARE FastPOS RAM Scraper Sending Details rev 4 2024-03-07
suricata ET EXPLOIT ThinkPHP Attempted Bypass and Payload Retrieval rev 3 2024-03-07
suricata ET PHISHING Possible Phishing Landing via MoonFruit.com M1 2016-01-22 rev 6 2024-03-07
suricata ET MALWARE ELF/Emptiness v2 XOR DNS Flood Command Inbound rev 2 2024-03-07
suricata ET PHISHING Amazon Phish Landing Jun 22 2017 rev 5 2024-03-07
suricata ET PHISHING Avast Phishing Landing 2016-06-02 rev 4 2024-03-07
suricata ET EXPLOIT Pwdump3e Session Established Reg-Entry port 445 rev 9 2024-03-07
suricata ET MALWARE Dialer.Trojan Activity rev 7 2024-03-07
suricata ET PHISHING Email Settings Error Phishing Landing Nov 16 2016 rev 5 2024-03-07
suricata ET MALWARE ELF/Emptiness v2 XOR Exec Command Inbound rev 2 2024-03-07
suricata ET PHISHING Successful Wells Fargo Phish Loading Page 2016-01-07 rev 4 2024-03-07
suricata ET EXPLOIT FTPShell client Stack Buffer Overflow rev 2 2024-03-07
suricata ET ADWARE_PUP Zenotecnico Adware 2 rev 9 2024-03-07
suricata ET PHISHING Successful Outlook Password Update Phish M3 2016-09-01 rev 4 2024-03-07
suricata ET PHISHING Successful Yahoo Password Strength Phish M2 2016-08-24 rev 4 2024-03-07
suricata ET MALWARE Unknown VBScript Loader with Encoded PowerShell Execution Inbound rev 5 2024-03-07
suricata ET EXPLOIT Pwdump4 Session Established GetHash port 139 rev 5 2024-03-07
suricata ET MALWARE Ranscam Ransomware Contact Form rev 4 2024-03-07
suricata ET PHISHING Successful DHL Phish 2016-02-09 rev 7 2024-03-07
suricata ET PHISHING Successful Generic Phish 2016-10-27 rev 5 2024-03-07
suricata ET PHISHING Successful Outlook Phish 2016-10-25 rev 4 2024-03-07
suricata ET PHISHING Successful Webmail Phish M2 2016-06-22 rev 5 2024-03-07
suricata ET PHISHING Successful Earthlink Phish 2016-07-19 rev 6 2024-03-07
suricata ET WEB_SERVER HTTP Request to a *.54dfa1cb.com domain - Anuna Checkin - Compromised PHP Site rev 6 2024-03-07
suricata ET MALWARE Alina Server Response Code rev 8 2024-03-07
suricata ET PHISHING Possible barclays .co. uk Phishing Domain 2016-06-22 rev 8 2024-03-07
suricata ET WEB_CLIENT Fake Virus Phone Scam Landing Mar 9 M2 rev 5 2024-03-07
suricata ET MALWARE DFKRAT CnC Checkin M1 rev 1 2024-03-07
suricata ET ADWARE_PUP Gator/Clarian Agent rev 15 2024-03-07
suricata ET PHISHING Successful UK Tax Phishing M1 2016-02-01 rev 5 2024-03-07