Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
sigma Windows Credential Editor Registry test 2021-11-27
sigma Registry Entries For Azorult Malware test 2021-11-27
sigma Path To Screensaver Binary Modified test 2021-11-27
sigma Octopus Scanner Malware test 2021-11-27
sigma Visual Basic Command Line Compiler Usage test 2021-11-27
sigma Indirect Command Execution By Program Compatibility Wizard test 2021-11-27
sigma OpenWith.exe Executes Specified Binary test 2021-11-27
sigma Execute Files with Msdeploy.exe test 2021-11-27
sigma RedMimicry Winnti Playbook Registry Manipulation test 2021-11-27
sigma WINEKEY Registry Modification test 2021-11-27
sigma Using SettingSyncHost.exe as LOLBin test 2021-11-27
sigma Suspicious HWP Sub Processes test 2021-11-27
sigma Devtoolslauncher.exe Executes Specified Binary test 2021-11-27
sigma Processes Accessing the Microphone and Webcam test 2021-11-27
sigma Microsoft 365 - Impossible Travel Activity test 2021-11-27
sigma Suspicious C2 Activities test 2021-11-27
sigma Auditing Configuration Changes on Linux Host test 2021-11-27
sigma Modification of ld.so.preload test 2021-11-27
sigma Logging Configuration Changes on Linux Host test 2021-11-27
sigma Suspicious Activity in Shell Commands test 2021-11-27
sigma Suspicious Log Entries test 2021-11-27
sigma Suspicious Reverse Shell Command Line test 2021-11-27
sigma Symlink Etc Passwd test 2021-11-27
sigma Suspicious OpenSSH Daemon Error test 2021-11-27
sigma Decode Base64 Encoded Text test 2021-11-27
sigma Split A File Into Pieces test 2021-11-27
sigma Credentials from Password Stores - Keychain test 2021-11-27
sigma Disable Security Tools test 2021-11-27
sigma MITRE BZAR Indicators for Execution test 2021-11-27
sigma MITRE BZAR Indicators for Persistence test 2021-11-27
sigma Executable from Webdav test 2021-11-27
sigma Windows PowerShell User Agent test 2021-11-27
sigma Potential Remote Desktop Connection to Non-Domain Host test 2021-11-27
sigma Successful Overpass the Hash Attempt test 2021-11-27
sigma SAM Registry Hive Handle Request test 2021-11-27
sigma SysKey Registry Keys Access test 2021-11-27
sigma Exploiting SetupComplete.cmd CVE-2019-1378 test 2021-11-27
sigma Mustang Panda Dropper test 2021-11-27
sigma Hidden User Creation test 2021-11-27
sigma MacOS Emond Launch Daemon test 2021-11-27