Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
yara Mirai_Renesas_SH — —
yara Mirai_PPC_Cisco — —
yara Mirai_SPARC_MSB — —
yara Mirai_1 — —
yara Mirai_5 — —
yara Mirai_Okiru — —
yara Mirai_Satori — —
yara tran_duy_linh — —
yara misc_iocs — —
yara malicious_LNK_files — —
yara memory_pivy — —
yara memory_shylock — —
yara ScanBox_Malware_Generic — —
yara TrojanDownloader — —
yara Cloaked_as_JPG — —
yara rtf_yahoo_ken — —
yara ZXProxy — —
yara OrcaRAT — —
yara EmiratesStatement — —
yara PUP_InstallRex_AntiFWb — —
yara Yayih — —
yara LightFTP_fftp_x86_64 — —
yara LightFTP_Config — —
yara SpyGate_v2_9 — —
yara ice_ix_12xy — —
yara qadars — —
yara shylock — —
yara spyeye — —
yara spyeye_plugins — —
yara callTogether_certificate — —
yara qti_certificate — —
yara DownExecute_A — —
yara CVE_2015_1674_CNGSYS — —
yara Pandora — —
yara Base64_encoded_Executable — —
yara CredStealESY — —
yara Typical_Malware_String_Transforms — —
yara Invoke_mimikittenz — —
yara LinuxAESDDoS — —
yara LinuxBillGates — —