Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Win32/HMR RAT Sending System Information rev 1 2023-03-13
sigma Suspicious Rundll32 Execution With Image Extension test 2023-03-13
sigma Potential Qakbot Registry Activity test 2023-03-13
sigma Important Scheduled Task Deleted/Disabled test 2023-03-13
sigma Gzip Archive Decode Via PowerShell test 2023-03-13
snort ET TROJAN Prometei Botnet CnC DGA - xinchao Pattern rev 1 2023-03-10
snort ET TROJAN Possible Kaseya VSA Exploit Activity Inbound M1 rev 2 2023-03-10
snort ET CURRENT_EVENTS Generic Credential Phish Landing Page 2022-10-10 rev 2 2023-03-10
snort ET TROJAN Prometei Botnet CnC Checkin rev 1 2023-03-10
snort ET CURRENT_EVENTS United Parcel Service Landing Page 2023-03-10 rev 1 2023-03-10
snort ET CURRENT_EVENTS Possible Credential Phish Landing Page 2023-03-10 rev 1 2023-03-10
snort ET CURRENT_EVENTS Email Server Mobile Security Settings Phishing Landing 2018-01-22 rev 3 2023-03-10
snort ET TROJAN Prometei Botnet CnC Checkin - Payload Retrieval rev 1 2023-03-10
suricata ET MALWARE Possible Kaseya VSA Exploit URI Structure Inbound rev 2 2023-03-10
suricata ET MALWARE Possible Kaseya VSA Exploit Activity Inbound M2 rev 2 2023-03-10
suricata ET PHISHING Generic Credential Phish Landing Page 2022-10-10 rev 2 2023-03-10
suricata ET PHISHING Possible Credential Phish Landing Page 2023-03-10 rev 1 2023-03-10
suricata ET MALWARE VBS/Kimsuky.O Host Fingerprint Exfil rev 2 2023-03-10
suricata ET MALWARE Lyceum Golang HTTP Backdoor Connectivity Check rev 3 2023-03-10
suricata ET PHISHING United Parcel Service Landing Page 2023-03-10 rev 1 2023-03-10
suricata ET MALWARE Prometei Botnet CnC Checkin rev 1 2023-03-10
suricata ET MALWARE Prometei Botnet CnC Checkin - Payload Retrieval rev 1 2023-03-10
suricata ET PHISHING Email Server Mobile Security Settings Phishing Landing 2018-01-22 rev 2 2023-03-10
suricata ET MALWARE Possible Kaseya VSA Exploit Activity Inbound M1 rev 2 2023-03-10
sigma Potential Ke3chang/TidePool Malware Activity test 2023-03-10
sigma APT31 Judgement Panda Activity test 2023-03-10
sigma MERCURY APT Activity test 2023-03-10
sigma Lazarus System Binary Masquerading test 2023-03-10
sigma Lazarus Group Activity test 2023-03-10
sigma Potential MuddyWater APT Activity test 2023-03-10
snort ET TROJAN Win32/Packed.BlackMoon.A Checkin rev 1 2023-03-09
snort ET TROJAN Hact .be Pentesting CnC Activity rev 1 2023-03-09
snort ET CURRENT_EVENTS Prohqcker Phish Kit rev 2 2023-03-09
suricata ET MALWARE Win32/Packed.BlackMoon.A Checkin rev 1 2023-03-09
suricata ET PHISHING Prohqcker Phish Kit rev 2 2023-03-09
sigma Uninstall Crowdstrike Falcon Sensor test 2023-03-09
sigma Potential EmpireMonkey Activity test 2023-03-09
sigma Greenbug Espionage Group Indicators test 2023-03-09
sigma APT27 - Emissary Panda Activity test 2023-03-09
sigma Elise Backdoor Activity test 2023-03-09