Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
sigma Citrix Netscaler Attack CVE-2019-19781 test 2023-01-02
sigma Confluence Exploitation CVE-2019-3398 test 2023-01-02
sigma Php Inline Command Execution test 2023-01-02
sigma Perl Inline Command Execution test 2023-01-02
sigma DEWMODE Webshell Access test 2023-01-02
sigma Suspicious Diantz Alternate Data Stream Execution test 2022-12-31
sigma Invoke-Obfuscation Obfuscated IEX Invocation - PowerShell test 2022-12-31
sigma Linux Doas Conf File Creation stable 2022-12-31
sigma Triple Cross eBPF Rootkit Default Persistence test 2022-12-31
sigma Triple Cross eBPF Rootkit Default LockFile test 2022-12-31
sigma Invoke-Obfuscation Obfuscated IEX Invocation - PowerShell Module test 2022-12-31
sigma Potential DLL Sideloading Using Coregen.exe test 2022-12-31
snort ET TROJAN TA444 Related CnC Payload Request rev 1 2022-12-30
snort ET TROJAN ViperSoftX HTTP CnC Activity rev 1 2022-12-30
suricata ET MALWARE TA444 Related CnC Payload Request rev 1 2022-12-30
suricata ET MALWARE ViperSoftX HTTP CnC Activity rev 1 2022-12-30
sigma Windows Firewall Profile Disabled test 2022-12-30
sigma Use Of Hidden Paths Or Files test 2022-12-30
sigma Microsoft IIS Connection Strings Decryption test 2022-12-30
sigma Suspicious Extrac32 Alternate Data Stream Execution test 2022-12-30
sigma Potential Suspicious Activity Using SeCEdit test 2022-12-30
sigma Deletion of Volume Shadow Copies via WMI with PowerShell test 2022-12-30
sigma Change the Fax Dll test 2022-12-30
sigma Privilege Escalation via Named Pipe Impersonation test 2022-12-30
sigma Change User Account Associated with the FAX Service test 2022-12-30
sigma Suspicious Usage Of ShellExec_RunDLL test 2022-12-30
snort ET GAMES Multiple Game Cheat Application Related Activity rev 1 2022-12-29
sigma Potential Suspicious Windows Feature Enabled - ProcCreation test 2022-12-29
sigma ImagingDevices Unusual Parent/Child Processes test 2022-12-29
sigma Invoke-Obfuscation COMPRESS OBFUSCATION test 2022-12-29
sigma Lolbin Runexehelper Use As Proxy test 2022-12-29
sigma Potential Suspicious Windows Feature Enabled test 2022-12-29
snort ET CURRENT_EVENTS Successful Netflix Credential Phish 2022-12-27 rev 1 2022-12-28
snort ET CURRENT_EVENTS Successful US Government Bid Credential Phish 2022-12-28 rev 1 2022-12-28
snort ET CURRENT_EVENTS Successful MetaMask Pass Phrase Phish 2022-12-27 rev 1 2022-12-28
snort ET CURRENT_EVENTS US Government Bid Credential Phish Landing Page 2022-12-28 rev 1 2022-12-28
snort ET TROJAN Win32/Uwamson.A!ml CnC Checkin rev 1 2022-12-28
snort ET INFO Suspicious Empty User-Agent rev 22 2022-12-28
suricata ET PHISHING US Government Bid Credential Phish Landing Page 2022-12-28 rev 1 2022-12-28
suricata ET PHISHING Successful Netflix Credential Phish 2022-12-27 rev 1 2022-12-28