Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
sigma AWS EC2 VM Export Failure test 2022-10-05
sigma Setuid and Setgid test 2022-10-05
sigma Suspicious Named Error test 2022-10-05
sigma Sudo Privilege Escalation CVE-2019-14287 test 2022-10-05
sigma Connection Proxy test 2022-10-05
sigma HH.EXE Initiated HTTP Network Connection test 2022-10-05
sigma CVE-2021-1675 Print Spooler Exploitation IPC Access test 2022-10-05
sigma Suspicious Commands Linux test 2022-10-05
sigma OMIGOD SCX RunAsProvider ExecuteScript test 2022-10-05
sigma Sign-ins by Unknown Devices test 2022-10-05
sigma OMIGOD SCX RunAsProvider ExecuteShellCommand test 2022-10-05
sigma AWS RDS Master Password Change test 2022-10-05
elastic GCP Kubernetes Rolebindings Created or Patched deprecated 2022-10-04
sigma PSAsyncShell - Asynchronous TCP Reverse Shell test 2022-10-04
sigma Suspicious File Drop by Exchange test 2022-10-04
sigma SyncAppvPublishingServer Execute Arbitrary PowerShell Code test 2022-10-04
snort ET CURRENT_EVENTS Generic Credential Phish Landing Page M1 2022-09-28 rev 1 2022-10-03
snort ET CURRENT_EVENTS Successful Facebook Credential Phish 2022-08-01 rev 1 2022-10-03
snort ET CURRENT_EVENTS Generic Credential Phish Landing Page 2022-10-03 rev 1 2022-10-03
snort ET CURRENT_EVENTS PUBG Credential Phish Landing Page 2022-08-22 rev 1 2022-10-03
snort ET CURRENT_EVENTS Union Bank Credential Phish Landing Page 2022-08-29 rev 1 2022-10-03
snort ET CURRENT_EVENTS Successful Generic Credential Phish Landing Page 2022-07-26 rev 1 2022-10-03
snort ET CURRENT_EVENTS Generic Credential Phish Landing Page M2 2022-09-28 rev 2 2022-10-03
snort ET CURRENT_EVENTS Facebook Credential Phish Landing Page 2022-08-22 rev 1 2022-10-03
snort ET CURRENT_EVENTS Facebook Credential Phish Landing Page M1 2022-08-01 rev 1 2022-10-03
snort ET CURRENT_EVENTS Successful Generic Credential Phish 2022-08-23 rev 1 2022-10-03
snort ET CURRENT_EVENTS Microsoft Excel Credential Phish Landing Page 2022-10-03 rev 1 2022-10-03
snort ET CURRENT_EVENTS Successful Generic Credential Phish 2022-08-26 rev 1 2022-10-03
snort ET CURRENT_EVENTS Generic Credential Phish Landing Page 2022-08-23 rev 1 2022-10-03
snort ET CURRENT_EVENTS Generic Credential Phish Landing Page 2022-07-26 rev 1 2022-10-03
snort ET CURRENT_EVENTS Facebook Credential Phish Landing Page M2 2022-08-01 rev 1 2022-10-03
suricata ET PHISHING Generic Credential Phish Landing Page M1 2022-09-28 rev 1 2022-10-03
suricata ET PHISHING Facebook Credential Phish Landing Page M1 2022-08-01 rev 1 2022-10-03
suricata ET PHISHING Facebook Credential Phish Landing Page M2 2022-08-01 rev 1 2022-10-03
suricata ET PHISHING Successful Facebook Credential Phish 2022-08-01 rev 1 2022-10-03
suricata ET PHISHING Generic Credential Phish Landing Page 2022-07-26 rev 1 2022-10-03
suricata ET PHISHING Microsoft Excel Credential Phish Landing Page 2022-10-03 rev 1 2022-10-03
suricata ET PHISHING Generic Credential Phish Landing Page 2022-08-23 rev 1 2022-10-03
suricata ET PHISHING Generic Credential Phish Landing Page M2 2022-09-28 rev 2 2022-10-03
suricata ET PHISHING Successful Generic Credential Phish 2022-08-23 rev 1 2022-10-03