Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Win32/Orchard Botnet Activity M2 rev 1 2022-09-01
suricata ET ADWARE_PUP ZeroTier P2P VPN Activity M1 rev 1 2022-09-01
snort ET MALWARE Win32/ReImageRepair.T CnC Activity rev 1 2022-08-31
sigma Suspicious Schtasks Schedule Type With High Privileges test 2022-08-31
snort ET TROJAN Win32/Caypnamer.A RAT CnC Keepalive rev 1 2022-08-30
snort ET TROJAN VBS/Kimsuky.O Host Fingerprint Exfil rev 1 2022-08-30
snort ET TROJAN Win32/Sabsik.FL.B!ml Exfil rev 1 2022-08-30
suricata ET MALWARE Win32/Caypnamer.A RAT CnC Keepalive rev 1 2022-08-30
sigma RTCore Suspicious Service Installation test 2022-08-30
sigma Bypass UAC via CMSTP test 2022-08-30
snort ET INFO Malware Destroyer Checkin rev 1 2022-08-29
snort ET MOBILE_MALWARE Trojan-Dropper.AndroidOS.Hqwar.hf Checkin rev 1 2022-08-29
snort ET CURRENT_EVENTS Successful Telstra Credential Phish 2022-08-29 rev 1 2022-08-29
snort ET TROJAN TA457 Backdoor CnC Activity rev 1 2022-08-29
snort ET INFO Malware Destroyer FTP Login rev 1 2022-08-29
snort ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Ermak.a Checkin rev 2 2022-08-29
snort ET TROJAN TA457 Backdoor CnC Response rev 2 2022-08-29
snort ET TROJAN Win32/Meimaii Checkin rev 1 2022-08-29
snort ET TROJAN NetSupport RAT with System Information rev 1 2022-08-29
suricata ET MALWARE TA457 Backdoor CnC Response rev 2 2022-08-29
suricata ET INFO Malware Destroyer Checkin rev 1 2022-08-29
suricata ET MALWARE TA457 Backdoor CnC Activity rev 1 2022-08-29
suricata ET INFO Malware Destroyer FTP Login rev 1 2022-08-29
suricata ET HUNTING NOP Sled in HTTP URI Inbound - Possible Exploit Activity rev 4 2022-08-29
snort ET TROJAN Win32/Unknown CnC Activity rev 1 2022-08-26
snort ET CURRENT_EVENTS Successful Bank of America Credential Phish 2022-08-25 rev 1 2022-08-26
suricata ET MALWARE Win32/Unknown CnC Activity rev 1 2022-08-26
suricata ET PHISHING Successful Bank of America Credential Phish 2022-08-25 rev 1 2022-08-26
sigma Suspicious SysAidServer Child test 2022-08-26
sigma Dism Remove Online Package test 2022-08-26
snort ET MALWARE pdfspeedup Keep-Alive rev 1 2022-08-25
snort ET TROJAN PyPI Malicious Library Update Payload Checkin rev 1 2022-08-25
snort ET MALWARE pdfspeedup Initial CnC Checkin rev 1 2022-08-25
snort ET TROJAN Possible OSX/SHLAYER Checkin M2 rev 1 2022-08-25
snort ET CURRENT_EVENTS PyPI Successful Credential Harvesting Attempt rev 1 2022-08-25
snort ET TROJAN Win32/Filecoder.GC CnC Credentials Exfil rev 1 2022-08-25
suricata ET PHISHING PyPI Successful Credential Harvesting Attempt rev 1 2022-08-25
suricata ET MALWARE Win32/Filecoder.GC CnC Credentials Exfil rev 1 2022-08-25
suricata ET MALWARE PyPI Malicious Library Update Payload Checkin rev 1 2022-08-25
sigma Sliver C2 Default Service Installation test 2022-08-25