Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
splunk JetBrains TeamCity Authentication Bypass CVE-2024-27198 production 2026-05-13
splunk JetBrains TeamCity Authentication Bypass Suricata CVE-2024-27198 production 2026-05-13
splunk JetBrains TeamCity Limited Auth Bypass Suricata CVE-2024-27199 production 2026-05-13
splunk JetBrains TeamCity RCE Attempt production 2026-05-13
splunk Juniper Networks Remote Code Execution Exploit Detection production 2026-05-13
splunk Microsoft SharePoint Server Elevation of Privilege production 2026-05-13
splunk Monitor Web Traffic For Brand Abuse experimental 2026-05-13
splunk Multiple Archive Files Http Post Traffic production 2026-05-13
splunk PaperCut NG Remote Web Access Attempt production 2026-05-13
splunk ProxyShell ProxyNotShell Behavior Detected production 2026-05-13
splunk SAP NetWeaver Visual Composer Exploitation Attempt production 2026-05-13
splunk Spring4Shell Payload URL Request production 2026-05-13
splunk SQL Injection with Long URLs experimental 2026-05-13
splunk Supernova Webshell experimental 2026-05-13
splunk Tomcat Session Deserialization Attempt production 2026-05-13
splunk Tomcat Session File Upload Attempt production 2026-05-13
splunk VMWare Aria Operations Exploit Attempt production 2026-05-13
splunk VMware Server Side Template Injection Hunt production 2026-05-13
splunk VMware Workspace ONE Freemarker Server-side Template Injection production 2026-05-13
splunk Web JSP Request via URL production 2026-05-13
splunk Web Remote ShellServlet Access production 2026-05-13
splunk Web Spring4Shell HTTP Request Class Module production 2026-05-13
splunk Web Spring Cloud Function FunctionRouter production 2026-05-13
splunk Windows Exchange Autodiscover SSRF Abuse production 2026-05-13
splunk Windows IIS Server PSWA Console Access production 2026-05-13
splunk Windows SharePoint Spinstall0 GET Request production 2026-05-13
splunk Windows SharePoint ToolPane Endpoint Exploitation Attempt production 2026-05-13
splunk WordPress Bricks Builder plugin RCE production 2026-05-13
splunk WS FTP Remote Code Execution production 2026-05-13
splunk Zscaler Adware Activities Threat Blocked production 2026-05-13
splunk Zscaler Behavior Analysis Threat Blocked production 2026-05-13
splunk Zscaler CryptoMiner Downloaded Threat Blocked production 2026-05-13
splunk Zscaler Employment Search Web Activity production 2026-05-13
splunk Zscaler Exploit Threat Blocked production 2026-05-13
splunk Zscaler Legal Liability Threat Blocked production 2026-05-13
splunk Zscaler Malware Activity Threat Blocked production 2026-05-13
splunk Zscaler Phishing Activity Threat Blocked production 2026-05-13
splunk Zscaler Potentially Abused File Download production 2026-05-13
splunk Zscaler Privacy Risk Destinations Threat Blocked production 2026-05-13
splunk Zscaler Scam Destinations Threat Blocked production 2026-05-13