Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Win32/Sharik Checkin rev 2 2019-10-08
suricata GPL SNMP SNMP trap Format String detected rev 5 2019-10-08
suricata ET SCAN Nessus Netbios Scanning rev 3 2019-10-08
suricata ET MALWARE US-CERT TA14-353A Lightweight Backdoor 4 rev 2 2019-10-08
suricata ET SCAN MySQL Malicious Scanning 2 rev 2 2019-10-08
suricata ET MALWARE US-CERT TA14-353A Lightweight Backdoor 2 rev 2 2019-10-08
suricata ET SHELLCODE Linux/x86-64 - Reverse Shell Shellcode rev 2 2019-10-08
suricata ET EXPLOIT SolusVM 1.13.03 Access to solusvmc-node setuid bin rev 4 2019-10-08
suricata ET MALWARE Windows WMIC SERVICE get Microsoft Windows DOS prompt command exit OUTBOUND rev 2 2019-10-08
suricata ET INFO WinUpack Modified PE Header Inbound rev 6 2019-10-08
suricata ET HUNTING Suspicious X-mailer Synapse Inbound to SMTP Server rev 2 2019-10-08
suricata ET WEB_SPECIFIC_APPS JoomSocial AvatarUpload RCE rev 9 2019-10-08
suricata ET MALWARE TinyLoader.B2 Checkin no architecture rev 2 2019-10-08
suricata ET MALWARE Win32/Spy.Agent.OHT - AnunakAPT TCP Checkin 1 rev 3 2019-10-08
suricata ET EXPLOIT Possible MySQL cnf overwrite CVE-2016-6662 Attempt rev 2 2019-10-08
suricata ET MALWARE TrochilusRAT CnC Beacon 1 rev 4 2019-10-08
suricata ET INFO Splashtop Remote Control Session Start Request rev 2 2019-10-08
suricata ET MALWARE US-CERT TA14-353A Proxy Tool 1 rev 2 2019-10-08
suricata ET MALWARE TrochilusRAT CnC Beacon 2 rev 3 2019-10-08
suricata ET SCAN SipCLI VOIP Scan - TCP rev 2 2019-10-08
suricata GPL SNMP public access udp rev 13 2019-10-08
suricata ET MALWARE TinyLoader.A Checkin x64 rev 2 2019-10-08
suricata ET MALWARE US-CERT TA14-353A Lightweight Backdoor 10 rev 3 2019-10-08
snort ET TROJAN Nemours/Proyecto RAT CnC Checkin rev 2 2019-10-04
snort ET WEB_CLIENT Observed DNS Query to Malicious Cookie Monster Roulette JS Cookie Stealer Exfil Domain rev 2 2019-10-04
suricata ET MALWARE Nemours/Proyecto RAT CnC Checkin rev 3 2019-10-04
snort ET TROJAN Win32/Phoenix Keylogger Exfil via SMTP - Generic rev 2 2019-10-02
snort ET TROJAN Win32/Phoenix Keylogger SMTP Exfil - Screenshot rev 2 2019-10-02
snort ET TROJAN Win32/Phoenix Keylogger SMTP Exfil - Clipboard rev 2 2019-10-02
snort ET TROJAN Win32/Phoenix Keylogger SMTP Exfil - Logs rev 2 2019-10-02
snort ET TROJAN Win32/Phoenix Keylogger SMTP Exfil - Passwords rev 2 2019-10-02
suricata ET MALWARE Win32/Phoenix Keylogger SMTP Exfil - Logs rev 1 2019-10-02
suricata ET MALWARE Win32/Phoenix Keylogger SMTP Exfil - Clipboard rev 1 2019-10-02
suricata ET MALWARE Win32/Phoenix Keylogger SMTP Exfil - Screenshot rev 1 2019-10-02
suricata ET MALWARE Win32/Phoenix Keylogger SMTP Exfil - Passwords rev 1 2019-10-02
suricata ET MALWARE Win32/Phoenix Keylogger Exfil via SMTP - Generic rev 1 2019-10-02
snort ET TROJAN DNSChanger CnC Domain in DNS Lookup rev 2 2019-10-01
snort ET TROJAN DNSChanger CnC Domain in DNS Lookup rev 2 2019-10-01
snort ET TROJAN DNSChanger CnC Domain in DNS Lookup rev 2 2019-10-01
snort ET TROJAN DNSChanger CnC Domain in DNS Lookup rev 2 2019-10-01