Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Bank of America Phish 2015-11-06 rev 6 2024-03-07
suricata ET PHISHING Successful Amazon Phish 2015-11-07 rev 6 2024-03-07
suricata ET PHISHING Successful Paypal Phish Jan 23 2017 rev 5 2024-03-07
sigma Potential PowerShell Execution Via DLL test 2024-03-07
sigma Potential Raspberry Robin CPL Execution Activity test 2024-03-07
sigma Active Directory Certificate Services Denied Certificate Enrollment Request test 2024-03-07
sigma Github Push Protection Bypass Detected test 2024-03-07
sigma Github Push Protection Disabled test 2024-03-07
snort ET TROJAN TA421 Wineloader CnC Checkin M2 rev 1 2024-03-06
snort ET INFO Windows Scheduled Task XML Response from Server rev 1 2024-03-06
snort ET TROJAN Bitter APT Activity - Secondary Payload Retrieval Attempt rev 1 2024-03-06
suricata ET INFO HTTP Request to a *.ch.tf domain rev 6 2024-03-06
suricata ET INFO HTTP Request to a .noip.cn domain rev 6 2024-03-06
suricata ET ATTACK_RESPONSE MySQL User Account Enumeration rev 4 2024-03-06
suricata ET MALWARE Trojan.Dropper.Win32.Dapato.braa.AMN CnC traffic rev 3 2024-03-06
suricata ET INFO HTTP Request to a *.cz.tf domain rev 5 2024-03-06
suricata ET SCAN FHScan core User-Agent Detect rev 7 2024-03-06
suricata ET MALWARE APT CozyCar SSL Cert 2 rev 4 2024-03-06
suricata ET MALWARE Shady RAT Retrieve and Execute Command rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS WebPhotoPro galeri_info.php lang Parameter SQL Injection rev 7 2024-03-06
suricata ET ACTIVEX Viscom Movie Player Pro SDK ActiveX DrawText method Buffer Overflow Function Call rev 3 2024-03-06
suricata ET MOBILE_MALWARE Android/FakeTimer.A Reporting to CnC rev 6 2024-03-06
suricata ET WEB_SERVER SQL sp_delete_alert attempt rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS DevelopItEasy Photo Gallery photo_id parameter SQL Injection rev 9 2024-03-06
suricata ET MALWARE W32/ZxShell Server Checkin Response rev 2 2024-03-06
suricata ET WEB_SPECIFIC_APPS SlimCMS edit.php pageid Parameter SQL Injection rev 7 2024-03-06
suricata ET SCAN Wikto Scan rev 10 2024-03-06
suricata ET VOIP Possible Misuse Call from Cisco ooh323 rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS Venalsur Booking Centre HotelID Parameter SQL Injection rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS cfagcms right.php title Parameter SQL Injection rev 7 2024-03-06
suricata ET SCAN Grim's Ping ftp scanning tool rev 5 2024-03-06
suricata ET MALWARE ELF/muBoT IRC Activity 3 rev 3 2024-03-06
suricata ET SCAN SQLNinja MSSQL XPCmdShell Scan rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS BibCiter contacts.php idc Parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS AvailScript Photo Album Script pics.php sid Parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS Tours Manager cityview.php cityid Parameter SQL Injection rev 7 2024-03-06
suricata ET MALWARE Backdoor Win32/Hupigon.CK Server Checkin rev 2 2024-03-06
suricata ET WEB_SPECIFIC_APPS Easyedit CMS subcategory.php intSubCategoryID parameter sql injection rev 8 2024-03-06
suricata ET MALWARE ELF/muBoT IRC Activity 5 rev 3 2024-03-06
suricata ET INFO tor2www .onion Proxy SSL cert rev 4 2024-03-06