Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET HUNTING HTTP POST Request XOR Key 2a rev 2 2022-08-10
suricata ET HUNTING HTTP GET Request XOR Key 28 rev 2 2022-08-10
suricata ET HUNTING HTTP POST Request XOR Key aa rev 2 2022-08-10
suricata ET HUNTING HTTP GET Request XOR Key 9b rev 2 2022-08-10
suricata ET HUNTING HTTP GET Request XOR Key 42 rev 2 2022-08-10
suricata ET HUNTING HTTP GET Request XOR Key 17 rev 2 2022-08-10
suricata ET HUNTING HTTP POST Request XOR Key 89 rev 2 2022-08-10
suricata ET HUNTING HTTP GET Request XOR Key a5 rev 2 2022-08-10
suricata ET HUNTING HTTP POST Request XOR Key e2 rev 2 2022-08-10
suricata ET HUNTING HTTP POST Request XOR Key 9a rev 2 2022-08-10
suricata ET HUNTING HTTP POST Request XOR Key 6e rev 2 2022-08-10
suricata ET HUNTING HTTP POST Request XOR Key 15 rev 2 2022-08-10
suricata ET HUNTING HTTP GET Request XOR Key 3a rev 2 2022-08-10
suricata ET HUNTING HTTP GET Request XOR Key cd rev 2 2022-08-10
suricata ET HUNTING HTTP GET Request XOR Key f0 rev 2 2022-08-10
suricata ET HUNTING HTTP POST Request XOR Key 97 rev 2 2022-08-10
suricata ET HUNTING HTTP GET Request XOR Key fc rev 2 2022-08-10
suricata ET HUNTING HTTP POST Request XOR Key 38 rev 2 2022-08-10
sigma Guest User Invited By Non Approved Inviters test 2022-08-10
sigma Bpfdoor TCP Ports Redirect test 2022-08-10
sigma Temporary Access Pass Added To An Account test 2022-08-10
snort ET INFO HTTP GET Request XOR e4 rev 1 2022-08-09
snort ET TROJAN Win32/ErbiumStealer Panel CnC Checkin rev 1 2022-08-09
snort ET USER_AGENTS ErbiumStealer UA Observed rev 1 2022-08-09
snort ET TROJAN Netwire RAT Check-in rev 6 2022-08-09
suricata ET HUNTING HTTP GET Request XOR e4 rev 1 2022-08-09
suricata ET MALWARE Win32/ErbiumStealer Panel CnC Checkin rev 1 2022-08-09
sigma PIM Approvals And Deny Elevation test 2022-08-09
sigma Changes To PIM Settings test 2022-08-09
sigma PIM Alert Setting Changes To Disabled test 2022-08-09
snort ET TROJAN ELF/RapperBot CnC Checkin M1 rev 1 2022-08-08
snort ET TROJAN ELF/RapperBot CnC Checkin M2 rev 1 2022-08-08
suricata ET JA3 Hash - DeimosC2 Agent Activity rev 1 2022-08-08
suricata ET MALWARE ELF/RapperBot CnC Checkin M2 rev 1 2022-08-08
suricata ET MALWARE ELF/RapperBot CnC Checkin M1 rev 1 2022-08-08
sigma Service DACL Abuse To Hide Services Via Sc.EXE test 2022-08-08
sigma Flash Player Update from Suspicious Location test 2022-08-08
sigma Suspicious Debugger Registration Cmdline test 2022-08-06
sigma User Added To Privilege Role test 2022-08-06
sigma Bulk Deletion Changes To Privileged Account Permissions test 2022-08-05