Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN TA452 Trojan CnC Checkin M2 rev 1 2024-08-29
snort ET TROJAN TA452 Trojan CnC Checkin M1 rev 1 2024-08-29
snort ET TROJAN Lumma Stealer Related Fake Captcha Page Inbound M1 rev 1 2024-08-29
suricata ET MALWARE TA452 Trojan CnC Checkin M1 rev 1 2024-08-29
suricata ET MALWARE Lumma Stealer Related Fake Captcha Page Inbound M1 rev 1 2024-08-29
suricata ET MALWARE TA452 Trojan CnC Checkin M2 rev 1 2024-08-29
suricata ET MALWARE Lumma Stealer Related Fake Captcha Page Inbound M2 rev 1 2024-08-29
suricata ET WEB_SPECIFIC_APPS Fortra FileCatalyst Workflow Insecure HSQLDB Default Credentials rev 1 2024-08-29
sigma Potential DLL Injection Via AccCheckConsole test 2024-08-29
sigma Shell Invocation Via Ssh - Linux test 2024-08-29
sigma System Network Discovery - macOS test 2024-08-29
sigma Suspicious Child Process Of Wermgr.EXE test 2024-08-29
sigma A Rule Has Been Deleted From The Windows Firewall Exception List test 2024-08-29
snort ET CURRENT_EVENTS PigButcher Credential Phish Landing Page M3 2024-08-05 rev 1 2024-08-28
snort ET TROJAN Win32/Hancitor Checkin rev 5 2024-08-28
snort ET CURRENT_EVENTS PigButcher Credential Phish Landing Page M4 2024-08-05 rev 1 2024-08-28
snort ET CURRENT_EVENTS PigButcher Credential Phish Landing Page M1 2024-08-05 rev 1 2024-08-28
snort ET CURRENT_EVENTS PigButcher Credential Phish Landing Page M2 2024-08-05 rev 1 2024-08-28
snort ET CURRENT_EVENTS PigButcher Credential Phish Landing Page M5 2024-08-05 rev 1 2024-08-28
snort ET TROJAN Pingback OK Issued rev 2 2024-08-28
suricata ET PHISHING PigButcher Credential Phish Landing Page M2 2024-08-05 rev 1 2024-08-28
suricata ET MALWARE Pingback OK Issued rev 2 2024-08-28
suricata ET PHISHING PigButcher Credential Phish Landing Page M1 2024-08-05 rev 1 2024-08-28
suricata ET PHISHING PigButcher Credential Phish Landing Page M5 2024-08-05 rev 1 2024-08-28
suricata ET PHISHING PigButcher Credential Phish Landing Page M4 2024-08-05 rev 1 2024-08-28
suricata ET PHISHING PigButcher Credential Phish Landing Page M3 2024-08-05 rev 1 2024-08-28
suricata ET PHISHING PigButcher Kit Headers 2024-08-05 rev 1 2024-08-28
snort ET TROJAN VersaMem Webshell Authentication Attempt M2 rev 1 2024-08-27
snort ET TROJAN VersaMem Webshell Authentication Attempt M1 rev 1 2024-08-27
snort ET TROJAN VersaMem Webshell Authentication Attempt M3 rev 1 2024-08-27
snort ET TROJAN Rodmacer Stealer Data Exfiltration Attempt rev 1 2024-08-27
suricata ET MALWARE VersaMem Webshell Authentication Attempt M2 rev 1 2024-08-27
suricata ET MALWARE VersaMem Webshell Authentication Attempt M1 rev 1 2024-08-27
suricata ET MALWARE VersaMem Webshell Authentication Attempt M3 rev 1 2024-08-27
suricata ET MALWARE Rodmacer Stealer Data Exfiltration Attempt rev 1 2024-08-27
sigma Uncommon Sigverif.EXE Child Process test 2024-08-27
snort ET TROJAN Possible Cthulu Stealer URI Struct M1 rev 1 2024-08-26
snort ET TROJAN SystemBC CnC Beacon rev 1 2024-08-26
snort ET TROJAN Possible Cthulu Stealer URI Struct M2 rev 1 2024-08-26
suricata ET MALWARE Possible Cthulu Stealer URI Struct M1 rev 1 2024-08-26