Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Possible BulletProofLink Phishkit Activity - Redirect rev 2 2021-11-29
sigma Driver Load From A Temporary Directory test 2021-11-27
sigma Windows Credential Editor Registry test 2021-11-27
sigma Wdigest CredGuard Registry Modification test 2021-11-27
sigma Disable Security Events Logging Adding Reg Key MiniNt test 2021-11-27
sigma Path To Screensaver Binary Modified test 2021-11-27
sigma UAC Bypass Via Wsreset test 2021-11-27
sigma Suspicious RASdial Activity test 2021-11-27
sigma RedMimicry Winnti Playbook Registry Manipulation test 2021-11-27
sigma Suspicious Rundll32 Setupapi.dll Activity test 2021-11-27
sigma Mustang Panda Dropper test 2021-11-27
sigma WINEKEY Registry Modification test 2021-11-27
sigma Dumping Process via Sqldumper.exe test 2021-11-27
sigma OpenWith.exe Executes Specified Binary test 2021-11-27
sigma Visual Basic Command Line Compiler Usage test 2021-11-27
sigma Devtoolslauncher.exe Executes Specified Binary test 2021-11-27
sigma Turla Group Named Pipes test 2021-11-27
sigma Using SettingSyncHost.exe as LOLBin test 2021-11-27
sigma Registry Entries For Azorult Malware test 2021-11-27
sigma Sdclt Child Processes test 2021-11-27
sigma Hijack Legit RDP Session to Move Laterally test 2021-11-27
sigma Interactive AT Job test 2021-11-27
sigma DLL Execution Via Register-cimprovider.exe test 2021-11-27
sigma Run PowerShell Script from Redirected Input Stream test 2021-11-27
sigma Disabled IE Security Features test 2021-11-27
sigma Sysprep on AppData Folder test 2021-11-27
sigma Unsigned Image Loaded Into LSASS Process test 2021-11-27
sigma Audio Capture via SoundRecorder test 2021-11-27
sigma Suspicious Desktopimgdownldr Command test 2021-11-27
sigma Suspicious VBoxDrvInst.exe Parameters test 2021-11-27
sigma Winnti Pipemon Characteristics stable 2021-11-27
sigma Execute Files with Msdeploy.exe test 2021-11-27
sigma Exploiting SetupComplete.cmd CVE-2019-1378 test 2021-11-27
sigma Trickbot Malware Activity stable 2021-11-27
sigma WMI Persistence - Script Event Consumer File Write test 2021-11-27
sigma Malware Shellcode in Verclsid Target Process test 2021-11-27
sigma DNS Exfiltration and Tunneling Tools Execution test 2021-11-27
sigma WMI Event Subscription test 2021-11-27
sigma ZxShell Malware test 2021-11-27
sigma Exploit for CVE-2015-1641 stable 2021-11-27