Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING US Government Bid Credential Phish Landing Page 2022-12-28 rev 1 2022-12-28
sigma Potential Discovery Activity Using Find - Linux test 2022-12-28
sigma Potential Discovery Activity Using Find - MacOS test 2022-12-28
sigma System Network Connections Discovery - MacOs test 2022-12-28
sigma SES Identity Has Been Deleted test 2022-12-28
sigma Suspicious Execution via macOS Script Editor test 2022-12-28
snort ET MALWARE Win32/Atshz.A Checkin rev 2 2022-12-27
snort ET CURRENT_EVENTS Generic Credential Phish Landing Page 2022-12-27 rev 1 2022-12-27
snort ET MALWARE Win32/Atshz.A Checkin M2 rev 2 2022-12-27
snort ET TROJAN Antinum HTTP Checkin rev 1 2022-12-27
snort ET TROJAN Antinum WebSockets Start rev 1 2022-12-27
suricata ET PHISHING Generic Credential Phish Landing Page 2022-12-27 rev 1 2022-12-27
sigma Suspicious PsExec Execution - Zeek test 2022-12-27
sigma First Time Seen Remote Named Pipe - Zeek test 2022-12-27
sigma Remote Task Creation via ATSVC Named Pipe - Zeek test 2022-12-27
sigma Suspicious SQL Query test 2022-12-27
sigma Group Has Been Deleted Via Groupdel test 2022-12-26
sigma User Has Been Deleted Via Userdel test 2022-12-26
sigma Google Cloud SQL Database Modified or Deleted test 2022-12-25
sigma User Access Blocked by Azure Conditional Access test 2022-12-25
sigma Google Cloud Kubernetes CronJob test 2022-12-25
sigma Loading of Kernel Module via Insmod test 2022-12-25
sigma CVE-2020-0688 Exploitation via Eventlog test 2022-12-25
sigma Esentutl Volume Shadow Copy Service Keys test 2022-12-25
sigma Suspicious Tasklist Discovery Command test 2022-12-25
sigma Suspicious Splwow64 Without Params test 2022-12-25
sigma Execution via stordiag.exe test 2022-12-25
sigma OneLogin User Assumed Another User test 2022-12-25
sigma Change to Authentication Method test 2022-12-25
sigma Linux Crypto Mining Indicators test 2022-12-25
sigma Linux Reverse Shell Indicator test 2022-12-25
sigma OneLogin User Account Locked test 2022-12-25
sigma Login to Disabled Account test 2022-12-25
sigma Suspicious Computer Account Name Change CVE-2021-42287 test 2022-12-25
sigma Suspicious ZipExec Execution test 2022-12-25
sigma CVE-2021-1675 Print Spooler Exploitation Filename Pattern test 2022-12-25
sigma Enumeration for Credentials in Registry test 2022-12-25
sigma New DLL Added to AppInit_DLLs Registry Key test 2022-12-25
sigma InstallerFileTakeOver LPE CVE-2021-41379 File Create Event test 2022-12-25
sigma Compress Data and Lock With Password for Exfiltration With WINZIP test 2022-12-25