Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Win32/Remcos RAT Checkin 27 rev 3 2020-11-06
suricata ET MALWARE Win32/Remcos RAT Checkin 26 rev 3 2020-11-06
suricata ET MALWARE Win32/Remcos RAT Checkin 28 rev 3 2020-11-06
suricata ET MALWARE [eSentire] Remcos RAT Checkin 24 rev 2 2020-11-06
suricata ET MALWARE Win32/Remcos RAT Checkin 58 rev 2 2020-11-06
suricata ET MALWARE Win32/Remcos RAT Checkin 60 rev 2 2020-11-06
suricata ET MALWARE Win32/Remcos RAT Checkin 54 rev 2 2020-11-06
suricata ET MALWARE Win32/Remcos RAT Checkin 62 rev 2 2020-11-06
suricata ET MALWARE Win32/Remcos RAT Checkin 64 rev 2 2020-11-06
suricata ET MALWARE Win32/Remcos RAT Checkin 67 rev 2 2020-11-06
suricata ET MALWARE Win32/Remcos RAT Checkin 68 rev 2 2020-11-06
suricata ET WEB_SPECIFIC_APPS Zabbix popup.php SELECT FROM SQL Injection Vulnerability rev 5 2020-11-06
suricata ET MALWARE Win32/Remcos RAT Checkin 66 rev 2 2020-11-06
suricata ET MALWARE Win32/Remcos RAT Checkin 29 rev 2 2020-11-06
suricata ET WEB_SPECIFIC_APPS Mambo Zorder zorder Parameter INSERT INTO SQL Injection Vulnerability rev 6 2020-11-06
suricata ET MALWARE Win32/Remcos RAT Checkin 61 rev 2 2020-11-06
suricata ET MALWARE Win32/Remcos RAT Checkin 59 rev 2 2020-11-06
suricata ET WEB_SPECIFIC_APPS Possible ZOHO ManageEngine ADSelfService Captcha Bypass Attempt rev 4 2020-11-06
suricata ET MALWARE Win32/Remcos RAT Checkin 63 rev 2 2020-11-06
suricata ET MALWARE Win32/Remcos RAT Checkin 109 rev 2 2020-11-06
suricata ET WEB_SPECIFIC_APPS eyeOS file Parameter Local File Inclusion Attempt rev 5 2020-11-06
suricata ET MALWARE Win32/Remcos RAT Checkin 56 rev 2 2020-11-06
suricata ET MALWARE Win32/Remcos RAT Checkin 55 rev 2 2020-11-06
suricata ET MALWARE Win32/Remcos RAT Checkin 65 rev 2 2020-11-06
suricata ET MALWARE Remcos RAT Checkin 23 rev 4 2020-11-06
snort ET TROJAN Win32/PurpleWave Stealer CnC Exfil M2 rev 2 2020-11-05
snort ET MALWARE SilverSpeedup Generic PUA Software UA rev 2 2020-11-05
snort ET MALWARE STOPzilla Download Accelerator Activity rev 2 2020-11-05
suricata ET MALWARE Win32/COOKIEBAG Cookie APT1 Related rev 6 2020-11-05
suricata ET MALWARE Variant.Kazy.174106 Checkin rev 5 2020-11-05
suricata ET INFO Onion2Web Tor Proxy Cookie rev 5 2020-11-05
suricata ET MALWARE Magniber Ransomware CnC Domain in DNS Lookup rev 2 2020-11-05
suricata ET EXPLOIT_KIT TDS Sutra - cookie is set RULEZ rev 5 2020-11-05
suricata ET WEB_SPECIFIC_APPS joomla com_edir controller parameter Local File Inclusion vulnerability rev 5 2020-11-05
suricata ET WEB_SPECIFIC_APPS Possible JBoss/JMX InvokerServlet RCE Using Marshalled Object rev 6 2020-11-05
suricata ET WEB_SPECIFIC_APPS Possible JBoss/JMX EJBInvokerServlet RCE Using Marshalled Object rev 6 2020-11-05
suricata ET MALWARE Banking Trojan HTTP Cookie rev 5 2020-11-05
suricata ET WEB_SERVER Magento XMLRPC-Exploit Attempt rev 4 2020-11-05
suricata ET MALWARE Magniber Ransomware CnC Domain in DNS Lookup rev 2 2020-11-05
snort ET INFO Redirect to Joom AG Hosted Document - Potential Phishing rev 2 2020-11-04