Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
sigma Restore Public AWS RDS Instance test 2022-10-09
sigma Steganography Unzip Hidden Information From Picture File test 2022-10-09
sigma Disabling Security Tools test 2022-10-09
sigma AWS EKS Cluster Created or Deleted test 2022-10-09
sigma CVE-2021-1675 Print Spooler Exploitation test 2022-10-09
sigma Defrag Deactivation test 2022-10-09
sigma Pandemic Registry Key test 2022-10-09
sigma CosmicDuke Service Installation test 2022-10-09
sigma Adwind RAT / JRAT test 2022-10-09
sigma APT PRIVATELOG Image Load Pattern test 2022-10-09
sigma SOURGUM Actor Behaviours test 2022-10-09
sigma Conti NTDS Exfiltration Command test 2022-10-09
sigma Suspicious VBScript UN2452 Pattern test 2022-10-09
sigma UNC2452 PowerShell Pattern test 2022-10-09
sigma PsExec Default Named Pipe test 2022-10-09
sigma Blue Mockingbird test 2022-10-09
snort ET TROJAN Win32/RM3Loader Server Response rev 1 2022-10-07
snort ET CURRENT_EVENTS Successful Binance Credential Phish 2022-10-07 rev 1 2022-10-07
snort ET CURRENT_EVENTS DHL Credential Phish Landing Page 2022-10-07 rev 1 2022-10-07
snort ET CURRENT_EVENTS Binance Credential Phish Landing Page 2022-10-07 rev 1 2022-10-07
snort ET TROJAN TrueBot/Silence.Downlaoder Screenshot Post M2 rev 1 2022-10-07
snort ET MALWARE Win32/Adware.WDJiange.A CnC Checkin M1 rev 1 2022-10-07
snort ET TROJAN TrueBot/Silence.Downlaoder Screenshot Post M1 rev 1 2022-10-07
snort ET MALWARE Win32/Adware.Agent.NSF CnC Checkin M1 rev 1 2022-10-07
snort ET CURRENT_EVENTS Successful Outlook Phish 2022-10-06 rev 1 2022-10-07
suricata ET PHISHING Binance Credential Phish Landing Page 2022-10-07 rev 1 2022-10-07
suricata ET PHISHING Successful Outlook Phish 2022-10-06 rev 1 2022-10-07
suricata ET ADWARE_PUP Win32/Adware.Agent.NSF CnC Checkin M1 rev 1 2022-10-07
suricata ET MALWARE TrueBot/Silence.Downlaoder Screenshot Post M1 rev 1 2022-10-07
suricata ET ADWARE_PUP Win32/Adware.WDJiange.A CnC Checkin M1 rev 1 2022-10-07
sigma Formbook Process Creation test 2022-10-06
snort ET TROJAN AllcomeClipper CnC Checkin rev 1 2022-10-05
suricata ET MALWARE AllcomeClipper CnC Checkin rev 1 2022-10-05
sigma Silenttrinity Stager Msbuild Activity test 2022-10-05
sigma Suspicious LDAP-Attributes Used test 2022-10-05
sigma Metasploit Or Impacket Service Installation Via SMB PsExec test 2022-10-05
sigma Pass the Hash Activity 2 stable 2022-10-05
sigma Source Code Enumeration Detection by Keyword test 2022-10-05
sigma KrbRelayUp Service Installation test 2022-10-05
sigma PetitPotam Suspicious Kerberos TGT Request test 2022-10-05