Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SERVER Possible CVE-2016-5118 Exploit SVG attempt M2 rev 3 2020-07-14
snort ET WEB_CLIENT FiercePhish Password Prompt Accessed on External Server rev 2 2020-07-13
snort ET WEB_CLIENT Generic Webshell Password Prompt Accessed on External Compromised Server rev 2 2020-07-13
snort ET WEB_SERVER FiercePhish Password Prompt Accessed on Internal Server rev 2 2020-07-13
snort ET WEB_SERVER Generic Webshell Password Prompt Accessed on Internal Compromised Server rev 2 2020-07-13
snort ET TROJAN Win32/DTStealer CnC Activity rev 2 2020-07-13
suricata ET WEB_CLIENT FiercePhish Password Prompt Accessed on External Server rev 2 2020-07-13
suricata ET WEB_CLIENT Generic Webshell Password Prompt Accessed on External Compromised Server rev 2 2020-07-13
suricata ET WEB_SERVER Generic Webshell Password Prompt Accessed on Internal Compromised Server rev 2 2020-07-13
suricata ET WEB_SERVER FiercePhish Password Prompt Accessed on Internal Server rev 2 2020-07-13
snort ET TROJAN ELF/BASHLITE vbot Variant CnC rev 1 2020-07-10
suricata ET MALWARE ELF/BASHLITE vbot Variant CnC rev 1 2020-07-10
snort ET GAMES Dragon Raja Activity rev 2 2020-07-08
suricata ET GAMES Dragon Raja Activity rev 1 2020-07-08
snort ET TROJAN SuperKillerX CnC Activity rev 1 2020-07-07
snort ET TROJAN DCRat Initial CnC Activity rev 3 2020-07-07
snort ET TROJAN SuperKillerX Checkin Activity rev 1 2020-07-07
snort ET TROJAN Observed TaurusStealer CnC Domain in TLS SNI rev 2 2020-07-07
suricata ET PHISHING Adobe Online Document Phishing Landing M2 2016-04-25 rev 3 2020-07-07
suricata ET MALWARE SuperKillerX CnC Activity rev 1 2020-07-07
suricata ET MALWARE SuperKillerX Checkin Activity rev 1 2020-07-07
snort ET WEB_CLIENT Generic Mailer Accessed on Internal Server rev 3 2020-07-06
snort ET WEB_CLIENT Generic Mailer Accessed on External Server rev 2 2020-07-06
snort ET WEB_SERVER Generic Mailer Accessed on Internal Server rev 2 2020-07-06
snort ET POLICY CommandCam Download rev 2 2020-07-06
snort ET TROJAN W32/Echmark/MarkiRAT CnC Request rev 2 2020-07-06
snort ET TROJAN W32/Echmark/MarkiRAT CnC Host Checkin rev 2 2020-07-06
snort ET TROJAN W32/Echmark/MarkiRAT CnC Response rev 2 2020-07-06
suricata ET WEB_CLIENT Generic Mailer Accessed on External Server rev 2 2020-07-06
suricata ET INFO CommandCam Download rev 1 2020-07-06
suricata ET WEB_SERVER Generic Mailer Accessed on Internal Server rev 2 2020-07-06
suricata ET WEB_CLIENT Generic Mailer Accessed on Internal Server rev 3 2020-07-06
snort ET TROJAN Observed CobaltStrike CnC Domain in TLS SNI rev 2 2020-07-03
snort ET TROJAN Observed CobaltStrike CnC Domain in TLS SNI rev 2 2020-07-03
snort ET TROJAN Observed CobaltStrike CnC Domain in TLS SNI rev 2 2020-07-03
snort ET TROJAN Observed CobaltStrike CnC Domain in TLS SNI rev 2 2020-07-03
snort ET TROJAN Observed CobaltStrike CnC Domain in TLS SNI rev 2 2020-07-03
snort ET TROJAN Observed CobaltStrike CnC Domain in TLS SNI rev 2 2020-07-03
snort ET WEB_CLIENT Predator the Thief Password Prompt Accessed on External Compromised Server rev 2 2020-07-03
snort ET TROJAN Observed CobaltStrike CnC Domain in TLS SNI rev 2 2020-07-03