Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Trojan-PSW.Win32.Stealer.sb CnC rev 1 2022-06-10
snort ET INFO Possible Generic Stealer Sending a Screenshot rev 3 2022-06-10
suricata ET PHISHING Sparkasse Credential Phish Landing Page 2022-06-10 rev 1 2022-06-10
suricata ET HUNTING Possible Generic Stealer Sending a Screenshot rev 3 2022-06-10
suricata ET MALWARE Win32.Agent.kawe SMTP Stealer rev 1 2022-06-10
suricata ET HUNTING Possible Generic Stealer Sending System Information rev 3 2022-06-10
snort ET TROJAN Win32/RecordBreaker CnC Checkin - Server Response rev 1 2022-06-09
snort ET CURRENT_EVENTS DHL Credential Phish Landing Page 2022-06-09 rev 1 2022-06-09
snort ET CURRENT_EVENTS Successful DHL Credential Phish M1 2022-06-09 rev 1 2022-06-09
snort ET CURRENT_EVENTS Successful DHL Credential Phish M2 2022-06-09 rev 1 2022-06-09
suricata ET MALWARE APT-Q-37/Manling Flower Payload - CnC Checkin rev 1 2022-06-09
suricata ET PHISHING DHL Credential Phish Landing Page 2022-06-09 rev 1 2022-06-09
suricata ET MALWARE Win32/RecordBreaker CnC Checkin - Server Response rev 1 2022-06-09
sigma Use of VSIISExeLauncher.exe test 2022-06-09
sigma New Capture Session Launched Via DXCap.EXE test 2022-06-09
snort ET CURRENT_EVENTS Successful Generic Credential Phish M1 2022-06-08 rev 1 2022-06-08
snort ET CURRENT_EVENTS Facebook Credential Phish Landing Page 2022-06-08 rev 1 2022-06-08
snort ET CURRENT_EVENTS Successful Generic Credential Phish M2 2022-06-08 rev 1 2022-06-08
suricata ET PHISHING Facebook Credential Phish Landing Page 2022-06-08 rev 1 2022-06-08
suricata ET PHISHING Successful Generic Credential Phish M1 2022-06-08 rev 1 2022-06-08
suricata ET PHISHING Successful Generic Credential Phish M2 2022-06-08 rev 1 2022-06-08
sigma Creation of a Diagcab test 2022-06-08
sigma Azure Domain Federation Settings Modified test 2022-06-08
snort ET TROJAN Observed DNS Query to TA455 Domain rev 1 2022-06-07
snort ET TROJAN Observed DNS Query to TA455 Domain rev 1 2022-06-07
snort ET TROJAN Observed DNS Query to TA455 Domain rev 1 2022-06-07
snort ET TROJAN Observed DNS Query to TA455 Domain rev 1 2022-06-07
snort ET TROJAN Observed DNS Query to TA455 Domain rev 1 2022-06-07
snort ET TROJAN Observed DNS Query to TA455 Domain rev 1 2022-06-07
snort ET TROJAN Observed DNS Query to TA455 Domain rev 1 2022-06-07
snort ET TROJAN Observed DNS Query to TA455 Domain rev 1 2022-06-07
snort ET TROJAN Observed DNS Query to TA455 Domain rev 1 2022-06-07
snort ET TROJAN Observed DNS Query to TA455 Domain rev 1 2022-06-07
snort ET TROJAN Observed DNS Query to TA455 Domain rev 1 2022-06-07
snort ET TROJAN Observed DNS Query to TA455 Domain rev 1 2022-06-07
snort ET TROJAN Observed DNS Query to TA455 Domain rev 1 2022-06-07
snort ET TROJAN Observed DNS Query to TA455 Domain rev 1 2022-06-07
snort ET TROJAN Observed DNS Query to TA455 Domain rev 1 2022-06-07
snort ET TROJAN Observed DNS Query to TA455 Domain rev 1 2022-06-07
snort ET TROJAN Observed DNS Query to TA455 Domain rev 1 2022-06-07