Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CURRENT_EVENTS GitLab Phishing Landing 2018-07-19 rev 2 2018-07-19
snort ET WEB_SPECIFIC_APPS ELF file magic encoded Base64 Hex Escape Inbound Web Servers Likely Command Execution 9 rev 1 2018-07-19
snort ET WEB_SPECIFIC_APPS ELF file magic encoded Base64 Hex Escape Inbound Web Servers Likely Command Execution 8 rev 1 2018-07-19
snort ET WEB_SPECIFIC_APPS ELF file magic plain Inbound Web Servers Likely Command Execution 11 rev 2 2018-07-19
snort ET WEB_SPECIFIC_APPS ELF file magic encoded Base64 UTF-8 Inbound Web Servers Likely Command Execution 5 rev 1 2018-07-18
snort ET WEB_SPECIFIC_APPS ELF file magic encoded Base64 UTF-8 Inbound Web Servers Likely Command Execution 7 rev 1 2018-07-18
snort ET WEB_SPECIFIC_APPS ELF file magic encoded Base64 UTF-8 Inbound Web Servers Likely Command Execution 6 rev 1 2018-07-18
snort ET TROJAN QRat.Java.RAT Checkin Response rev 3 2018-07-18
snort ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Startup Script rev 2 2018-07-17
snort ET POLICY RunDll Request Over SMB - Likely Lateral Movement rev 2 2018-07-17
snort ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Service start rev 2 2018-07-17
snort ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Configuration Download rev 2 2018-07-17
snort ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Change Admin Passwd rev 2 2018-07-17
snort ET POLICY Powershell Command With NonInteractive Argument Over SMB - Likely Lateral Movement rev 1 2018-07-17
snort ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 3 rev 1 2018-07-17
snort ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 2 rev 1 2018-07-17
snort ET POLICY Powershell Command With Execution Bypass Argument Over SMB - Likely Lateral Movement rev 1 2018-07-17
snort ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Configuration Download rev 2 2018-07-17
snort ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Service Enable rev 2 2018-07-17
snort ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Process Kill rev 2 2018-07-17
snort ET POLICY Powershell Command With Hidden Window Argument Over SMB - Likely Lateral Movement rev 2 2018-07-17
snort ET POLICY Powershell Command With No Profile Argument Over SMB - Likely Lateral Movement rev 1 2018-07-17
snort ET WEB_SPECIFIC_APPS ELF file magic encoded ASCII Inbound Web Servers Likely Command Execution 4 rev 2 2018-07-17
snort ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Crontab rev 2 2018-07-17
snort ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Disable Firewall rev 2 2018-07-17
snort ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 4 rev 1 2018-07-17
snort ET EXPLOIT Nanopool Claymore Dual Miner Remote Code Execution Linux rev 1 2018-07-17
snort ET EXPLOIT Nanopool Claymore Dual Miner Remote Code Execution Windows rev 2 2018-07-17
snort ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Configuration Download rev 2 2018-07-17
snort ET MOBILE_MALWARE iOS/Bahamut DNS Lookup rev 2 2018-07-17
snort ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Service Stop rev 2 2018-07-17
snort ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 5 rev 1 2018-07-17
snort ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Default Credentials rev 2 2018-07-17
snort ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Add Admin Passwd rev 2 2018-07-17
snort ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Add Root Htpasswd rev 2 2018-07-17
snort ET WEB_SPECIFIC_APPS Fortify Software Security Center XML External Entity Injection 4 rev 2 2018-07-16
snort ET WEB_SPECIFIC_APPS Fortify Software Security Center XML External Entity Injection 2 rev 2 2018-07-16
snort ET POLICY SMB NT Create AndX Request For an Executable File rev 2 2018-07-16
snort ET POLICY SMB Remote AT Scheduled Job Pipe Creation rev 2 2018-07-16
snort ET POLICY SMB2 NT Create AndX Request For an Executable File rev 2 2018-07-16