Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
yara IndiaDelta — —
yara IndiaEcho — —
yara IndiaGolf — —
yara IndiaHotel — —
yara IndiaJuliett_1 — —
yara IndiaWhiskey — —
yara KiloAlfa — —
yara LimaAlfa — —
yara LimaBravo — —
yara LimaCharlie — —
yara LimaDelta — —
yara PapaAlfa — —
yara DestructiveHardDriveTool1 — —
yara CPUInfoExtraction — —
yara SuicideScriptL1 — —
yara SuicideScriptR1_Multi — —
yara SuicideScriptR — —
yara blackpos_v2 — —
yara dump_tool — —
yara osql_tool — —
yara misc_pos — —
yara unknown — —
yara heistenberg_pos — —
yara regex_pos — —
yara regexpr_pos — —
yara reg_pos — —
yara sets_pos — —
yara monitor_tool_pos — —
yara pstgdump — —
yara keyfinder_tool — —
yara memdump_diablo — —
yara blazingtools — —
yara sysocmgr — —
yara lacy_keylogger — —
yara pos_memory_scrapper_ — —
yara pos_malwre_dexter_stardust — —
yara pos_malware_project_hook — —
yara pdb_strings_Rescator — —
yara pos_uploader — —
yara winxml_dll — —