Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Cloned American Express Page - Possible Phishing Landing rev 2 2020-08-31
suricata ET ADWARE_PUP OSX/Fake Flash Player Download Oct 20 rev 4 2020-08-31
suricata ET ADWARE_PUP host-domain-lookup.com spyware related Start Report rev 8 2020-08-31
suricata ET ADWARE_PUP Tool.InstallToolbar.24 Reporting rev 6 2020-08-31
suricata ET ADWARE_PUP W32/SoftonicDownloader.Adware User Agent rev 5 2020-08-31
suricata ET PHISHING Cloned Godaddy Page - Possible Phishing Landing rev 2 2020-08-31
suricata ET ADWARE_PUP SoundCloud Downloader Install Beacon rev 4 2020-08-31
suricata ET PHISHING Successful France Ministry of Action and Public Accounts Phish 2019-07-04 rev 2 2020-08-31
suricata ET ADWARE_PUP Downloader Checkin - Downloads Rogue Adware rev 9 2020-08-31
suricata ET ADWARE_PUP LNKR Request for validate-site.js rev 4 2020-08-31
suricata ET MALWARE MuddyWater Payload Sending Command Output to CnC rev 2 2020-08-31
suricata ET INFO HTTP POST invalid method case outbound rev 6 2020-08-31
suricata ET EXPLOIT Possible OpenDreamBox Attempted Remote Command Injection Outbound rev 3 2020-08-31
suricata ET ADWARE_PUP W32/GameVance Adware Checkin rev 4 2020-08-31
suricata ET ADWARE_PUP SweetIM Install in Progress rev 4 2020-08-31
suricata ET ADWARE_PUP Dollarrevenue.com Spyware Code Download rev 7 2020-08-31
suricata ET ADWARE_PUP MyGlobalSearch Spyware bar update rev 8 2020-08-31
suricata ET ADWARE_PUP All Numerical .ru Domain HTTP Request Likely Malware Related rev 7 2020-08-31
suricata ET ADWARE_PUP Possible FakeAV Binary Download rev 8 2020-08-31
suricata ET WEB_SPECIFIC_APPS ECSHOP user.php SQL INJECTION via Referer rev 2 2020-08-31
suricata ET PHISHING Cloned Linkedin Page - Possible Phishing Landing rev 2 2020-08-31
suricata ET ADWARE_PUP Generic Adware Install Report rev 7 2020-08-31
suricata ET ADWARE_PUP OSX/Adware.Pirrit Web Injects rev 4 2020-08-31
suricata ET PHISHING Successful Generic Credit Card Information Phish 2019-06-04 rev 2 2020-08-31
suricata ET ADWARE_PUP MyGlobalSearch Spyware bar update 2 rev 8 2020-08-31
snort ET CURRENT_EVENTS Fedex Phishing Landing on Appspot Hosting rev 2 2020-08-28
snort ET TROJAN C3Pool CoinMiner Setup Script Download rev 2 2020-08-28
snort ET TROJAN MassLogger Client Data Exfil SMTP rev 3 2020-08-28
suricata ET MALWARE PS/Beapy CnC Checkin rev 4 2020-08-28
suricata ET MALWARE Evil PDF Retrieving Emotet Payload rev 3 2020-08-28
suricata ET MALWARE MSIL/SkidRat User-Agent Observed rev 2 2020-08-28
suricata ET PHISHING Fedex Phishing Landing on Appspot Hosting rev 2 2020-08-28
suricata ET MALWARE Outbound POST Request with Base64 ps PowerShell Command Output M3 rev 3 2020-08-28
suricata ET HUNTING Suspicious POST with Common Windows Process Names - Possible Process List Exfiltration rev 3 2020-08-28
suricata ET MALWARE Vidar/Arkei/Megumin/Oski Stealer HTTP POST Pattern rev 5 2020-08-28
suricata ET MALWARE MassLogger Client Data Exfil SMTP rev 3 2020-08-28
suricata ET MALWARE MSIL/CoinMiner Performing System Checkin rev 1 2020-08-28
suricata ET MALWARE Outbound POST Request with Base64 ps PowerShell Command Output M2 rev 3 2020-08-28
suricata ET MALWARE Outbound POST Request with Base64 ps PowerShell Command Output M1 rev 3 2020-08-28
suricata ET WEB_SPECIFIC_APPS Rails Arbitrary File Disclosure Attempt rev 3 2020-08-28