Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET EXPLOIT Possible CVE-2017-0199 HTA Inbound M2 rev 3 2022-05-03
snort ET ACTIVEX Dell Webcam CrazyTalk ActiveX Control BackImage Access Potential Buffer Overflow Attempt 2 rev 6 2022-05-03
snort ET INFO EXE - OSX Executable Download - Intel Arch rev 3 2022-05-03
snort ET TROJAN WEBC2-TABLE Checkin 1 - APT1 Related rev 5 2022-05-03
snort ET EXPLOIT OpenMRS Deserialization Vulnerability CVE-2018-19276 M2 rev 3 2022-05-03
snort ET TROJAN Arkei Stealer IP Lookup rev 4 2022-05-03
snort ET MALWARE Gator/Claria Data Submission rev 16 2022-05-03
snort ET TROJAN Mimikatz x64 Mimidrv.sys Download Over HTTP rev 3 2022-05-03
snort ET TROJAN Backdoor.Elise CnC Beacon 2 M2 rev 2 2022-05-03
snort ET TROJAN MINEBRIDGE CnC Response rev 3 2022-05-03
snort ET TROJAN Evil Google Drive Download rev 3 2022-05-03
snort ET WEB_SPECIFIC_APPS PRADO PHP Framework functional.php Local File Inclusion Vulnerability rev 3 2022-05-03
snort ET TROJAN [eSentire] Cobalt Strike Beacon rev 3 2022-05-03
snort ET TROJAN GCleaner Downloader Activity M3 rev 4 2022-05-03
snort ET TROJAN RegSubsDat Checkin Off Ports rev 5 2022-05-03
snort ET INFO EXE - OSX Executable Download - PowerPC Arch rev 3 2022-05-03
snort ET TROJAN Ransom.Win32.Birele.gsg Checkin rev 4 2022-05-03
snort ET TROJAN Possible Zbot Activity Common Download Struct rev 4 2022-05-03
snort ET TROJAN Metasploit Meterpreter stdapi_* Command Response rev 4 2022-05-03
snort ET CURRENT_EVENTS Successful Bank of America Phish 2015-10-29 rev 3 2022-05-03
snort ET TROJAN Known Sinkhole Response Header INetSim rev 2 2022-05-03
snort ET CURRENT_EVENTS [PTsecurity] Grandsoft EK Payload rev 3 2022-05-03
snort ET TROJAN Observed Certificate Base64 Encoded Executable Inbound rev 3 2022-05-03
snort ET SCAN w3af User Agent rev 13 2022-05-03
snort ET CURRENT_EVENTS Successful Banco do Brasil Phish Mar 30 2017 rev 3 2022-05-03
snort ET TROJAN PE EXE or DLL Windows file download disguised as ASCII rev 4 2022-05-03
snort ET TROJAN W32/SPARS/ARS Stealer Checkin rev 3 2022-05-03
snort ET CURRENT_EVENTS DRIVEBY [PwC CTD] -- MultiGroup - ScanBox and Targetted Watering Holes ActiveX Call rev 3 2022-05-03
snort ET SCAN Enumiax Inter-Asterisk Exchange Protocol Username Scan rev 6 2022-05-03
snort ET EXPLOIT AsusWRT RT-AC750GF Cross-Site Request Forgery rev 3 2022-05-03
snort ET FTP Suspicious Quotation Mark Usage in FTP Username rev 3 2022-05-03
snort ET WEB_SPECIFIC_APPS ThWboard SQL Injection Attempt -- index.php board DELETE rev 8 2022-05-03
snort GPL WEB_SERVER 403 Forbidden rev 12 2022-05-03
snort ET TROJAN Possible DANDERSPRITZ HTTP Beacon rev 2 2022-05-03
snort ET TROJAN Possible MSIL/Solorigate.G!dha/SUPERNOVA Webshell Access Request rev 3 2022-05-03
snort ET EXPLOIT Possible ECLIPSEDWING RPCTOUCH MS08-067 rev 3 2022-05-03
snort ET TROJAN Octopus Malware CnC Activity rev 3 2022-05-03
snort ET USER_AGENTS AnyDesk Remote Desktop Software User-Agent rev 4 2022-05-03
snort ET WEB_SERVER SHOW VARIABLES SQL Injection Attempt in URI rev 5 2022-05-03
snort ET TROJAN RegSubsDat Checkin rev 8 2022-05-03