Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
sigma Potential Credential Dumping Attempt Via PowerShell Remote Thread test 2022-12-18
sigma Potential DCOM InternetExplorer.Application DLL Hijack - Image Load test 2022-12-18
sigma Serv-U Exploitation CVE-2021-35211 by DEV-0322 test 2022-12-18
sigma Azure Kubernetes CronJob test 2022-12-18
sigma Azure Kubernetes Admission Controller test 2022-12-18
sigma Multifactor Authentication Interrupted test 2022-12-18
sigma Azure Unusual Authentication Interruption test 2022-12-18
sigma Linux Keylogging with Pam.d test 2022-12-18
sigma Screen Capture with Xwd test 2022-12-18
sigma Network Sniffing - Linux test 2022-12-18
sigma Google Cloud Kubernetes Admission Controller test 2022-12-18
snort ET TROJAN Win32/PSW.LdPinch CnC Checkin rev 1 2022-12-16
snort ET CURRENT_EVENTS Successful Made in China Credential Phish 2022-12-14 rev 1 2022-12-15
suricata ET PHISHING Successful Made in China Credential Phish 2022-12-14 rev 1 2022-12-15
sigma NotPetya Ransomware Activity test 2022-12-15
snort ET TROJAN Win32/Khaosz.A!MTB Checkin - Command Retrieval rev 1 2022-12-14
snort ET TROJAN Win32/Sality.NBA Exfil rev 1 2022-12-14
snort ET INFO SyncroMSP Remote Remote Management Software Install Registration rev 1 2022-12-14
snort ET INFO SyncroMSP Remote Remote Management Software Install Checkin rev 1 2022-12-14
snort ET CURRENT_EVENTS Successful America First CU Credential Phish 2022-12-14 rev 1 2022-12-14
snort ET TROJAN Filez Downloader Checkin rev 1 2022-12-14
snort ET CURRENT_EVENTS Successful Australian Government myGov Credential Phish 2022-12-14 rev 1 2022-12-14
suricata ET PHISHING Successful Australian Government myGov Credential Phish 2022-12-14 rev 1 2022-12-14
suricata ET MALWARE Win32/Sality.NBA Exfil rev 1 2022-12-14
suricata ET PHISHING Successful America First CU Credential Phish 2022-12-14 rev 1 2022-12-14
suricata ET MALWARE Win32/Khaosz.A!MTB Checkin - Command Retrieval rev 1 2022-12-14
suricata ET INFO SyncroMSP Remote Remote Management Software Install Registration rev 1 2022-12-14
sigma Potential Download/Upload Activity Using Type Command test 2022-12-14
sigma Potential DLL Sideloading Via JsSchHlp test 2022-12-14
snort ET TROJAN Impersoni-fake-ator backdoor CnC Checkin rev 2 2022-12-13
snort ET MALWARE Win32/SocksTroy Session Initiation Attempt M1 rev 1 2022-12-13
snort ET TROJAN DOC/TrojanDownloader.Agent.ARJ Payload Request rev 1 2022-12-13
snort ET MALWARE Win32/SocksTroy Session Initiation Attempt M2 rev 1 2022-12-13
snort ET TROJAN Villain C2 Framework HTTP Server Response rev 1 2022-12-13
suricata ET HUNTING Suspicious GET Request with Possible COVID-19 Domain M2 rev 4 2022-12-13
suricata ET HUNTING Possible COVID-19 Domain in SSL Certificate M1 rev 4 2022-12-13
suricata ET MALWARE Impersoni-fake-ator backdoor CnC Checkin rev 2 2022-12-13
suricata ET MALWARE Win32/SocksTroy Session Initiation Attempt M2 rev 1 2022-12-13
suricata ET MALWARE DOC/TrojanDownloader.Agent.ARJ Payload Request rev 1 2022-12-13
suricata ET HUNTING Suspicious TLS SNI Request for Possible COVID-19 Domain M2 rev 4 2022-12-13