Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET MALWARE Agrius Group ASPXSpy Webshell Connection Inbound M2 rev 1 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET WEB_SPECIFIC_APPS JBoss JMX Console Beanshell Deployer .WAR File Upload and Deployment Cross Site Request Forgery Attempt rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET MALWARE Agrius Group ASPXSpy Webshell Connection Inbound M1 rev 1 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03
suricata ET ATTACK_RESPONSE Havoc/Sliver Framework TLS Certificate Observed rev 2 2024-01-03