Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
sigma WMI Persistence - Security test 2022-11-29
sigma Tap Driver Installation - Security test 2022-11-29
sigma PowerShell Scripts Installed as Services - Security test 2022-11-29
sigma Credential Dumping Tools Service Execution - Security test 2022-11-29
sigma Invoke-Obfuscation VAR++ LAUNCHER OBFUSCATION - Security test 2022-11-29
sigma Invoke-Obfuscation Via Use Rundll32 - Security test 2022-11-29
sigma Invoke-Obfuscation Via Use MSHTA - Security test 2022-11-29
sigma Invoke-Obfuscation Via Stdin - Security test 2022-11-29
sigma Invoke-Obfuscation RUNDLL LAUNCHER - Security test 2022-11-29
sigma Invoke-Obfuscation COMPRESS OBFUSCATION - Security test 2022-11-29
sigma Invoke-Obfuscation VAR+ Launcher - Security test 2022-11-29
sigma Invoke-Obfuscation STDIN+ Launcher - Security test 2022-11-29
sigma Advanced IP Scanner - File Event test 2022-11-29
sigma Invoke-Obfuscation Via Use Rundll32 - PowerShell test 2022-11-29
sigma Invoke-Obfuscation Via Use MSHTA - PowerShell test 2022-11-29
sigma Invoke-Obfuscation RUNDLL LAUNCHER - PowerShell test 2022-11-29
sigma Invoke-Obfuscation COMPRESS OBFUSCATION - PowerShell test 2022-11-29
sigma Invoke-Obfuscation Via Use Rundll32 - PowerShell Module test 2022-11-29
sigma Invoke-Obfuscation RUNDLL LAUNCHER - PowerShell Module test 2022-11-29
sigma Invoke-Obfuscation COMPRESS OBFUSCATION - PowerShell Module test 2022-11-29
sigma Suspicious DNS Z Flag Bit Set test 2022-11-29
snort ET INFO IRC Nick change on non-standard port rev 17 2022-11-28
snort ET INFO Suspected Phishing Simulation Service Activity rev 1 2022-11-28
suricata ET INFO Suspected Phishing Simulation Service Activity rev 1 2022-11-28
sigma TacticalRMM Service Installation test 2022-11-28
sigma AWL Bypass with Winrm.vbs and Malicious WsmPty.xsl/WsmTxt.xsl - File test 2022-11-28
sigma Mesh Agent Service Installation test 2022-11-28
sigma Suspicious PowerShell IEX Execution Patterns test 2022-11-28
sigma Split A File Into Pieces - Linux test 2022-11-28
sigma Potential PetitPotam Attack Via EFS RPC Calls test 2022-11-28
sigma File Time Attribute Change - Linux test 2022-11-28
sigma Suspicious History File Operations - Linux test 2022-11-28
sigma Security Software Discovery - Linux test 2022-11-27
sigma Scheduled Cron Task/Job - Linux test 2022-11-27
sigma Defrag Deactivation - Security test 2022-11-27
sigma Operation Wocao Activity - Security test 2022-11-27
sigma Discovery Using AzureHound test 2022-11-27
sigma Local Groups Discovery - MacOs test 2022-11-27
sigma Scheduled Cron Task/Job - MacOs test 2022-11-27
sigma Security Software Discovery - MacOs test 2022-11-27