Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS Fanwei eMobile File Upload Vulnerability rev 1 2024-06-25
suricata ET MALWARE Wordpress Social Warfare Plugin Exploit Payload URI in GET Request rev 1 2024-06-25
suricata ET MALWARE Wordpress Social Warfare Plugin Exploit CMS Users Exfil M3 rev 1 2024-06-25
suricata ET WEB_SPECIFIC_APPS ShowDoc File Upload Vulnerability rev 1 2024-06-25
sigma CVE-2023-1389 Potential Exploitation Attempt - Unauthenticated Command Injection In TP-Link Archer AX21 test 2024-06-25
snort ET TROJAN Mint Stealer Data Exfiltration Server Response rev 1 2024-06-24
snort ET TROJAN Mint Stealer CnC Checkin rev 1 2024-06-24
snort ET INFO Centrastage RMM Server Response M1 rev 1 2024-06-24
snort ET TROJAN Mint Stealer Injection Request rev 1 2024-06-24
snort ET TROJAN Mint Stealer Data Exfiltration Attempt rev 1 2024-06-24
snort ET TROJAN Mint Stealer CnC Server Response rev 1 2024-06-24
snort ET INFO Centrastage RMM Server Response M2 rev 1 2024-06-24
snort ET INFO Centrastage RMM Agent Update Request rev 1 2024-06-24
snort ET INFO Centrastage RMM Agent Checkin rev 1 2024-06-24
snort ET CURRENT_EVENTS MyGovAU Credential Phish Landing Page 2024-06-24 rev 1 2024-06-24
snort ET TROJAN Mint Stealer Injection Server Response rev 1 2024-06-24
suricata ET PHISHING MyGovAU Credential Phish Landing Page 2024-06-24 rev 1 2024-06-24
suricata ET MALWARE Mint Stealer Data Exfiltration Attempt rev 1 2024-06-24
suricata ET MALWARE Mint Stealer Injection Request rev 1 2024-06-24
suricata ET MALWARE Mint Stealer Data Exfiltration Server Response rev 1 2024-06-24
suricata ET MALWARE Mint Stealer CnC Server Response rev 1 2024-06-24
suricata ET MALWARE Mint Stealer CnC Checkin rev 1 2024-06-24
suricata ET REMOTE_ACCESS Centrastage RMM Agent Update Request rev 1 2024-06-24
suricata ET REMOTE_ACCESS Centrastage RMM Agent Checkin rev 1 2024-06-24
suricata ET MALWARE Mint Stealer Injection Server Response rev 1 2024-06-24
suricata ET REMOTE_ACCESS Centrastage RMM Server Response M2 rev 1 2024-06-24
sigma Files With System DLL Name In Unsuspected Locations test 2024-06-24
sigma DNS Query To AzureWebsites.NET By Non-Browser Process test 2024-06-24
snort ET EXPLOIT Archeevo 5.0 - Local File Inclusion rev 2 2024-06-23
snort ET WEB_SPECIFIC_APPS Jiecheng Management Information System CWSFinanceCommon SQL injection rev 2 2024-06-23
snort ET EXPLOIT SugarCRM Auth Bypass Attempt 2022-12-31 rev 2 2024-06-23
snort ET EXPLOIT WordPress Plugin cab-fare-calculator 1.0.3 - Local File Inclusion rev 2 2024-06-23
suricata ET EXPLOIT WordPress Plugin cab-fare-calculator 1.0.3 - Local File Inclusion rev 2 2024-06-23
suricata ET EXPLOIT Archeevo 5.0 - Local File Inclusion rev 2 2024-06-23
suricata ET EXPLOIT SugarCRM Auth Bypass Attempt 2022-12-31 rev 2 2024-06-23
suricata ET WEB_SPECIFIC_APPS Jiecheng Management Information System CWSFinanceCommon SQL injection rev 2 2024-06-23
sigma Potential CSharp Streamer RAT Loading .NET Executable Image test 2024-06-22
snort ET INFO DYNAMIC_DNS Query to .afshin .ir Domain rev 1 2024-06-21
snort ET MOBILE_MALWARE Android Rafel RAT Checkin M1 rev 2 2024-06-21
snort ET MOBILE_MALWARE Android Rafel RAT Checkin M2 rev 1 2024-06-21