Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Possible Deep Panda User-Agent rev 8 2024-05-04
suricata ET INFO HotSpotShield Activity rev 7 2024-05-04
suricata ET MALWARE Suspected USBFERRY CnC rev 3 2024-05-04
suricata ET MALWARE Trickbot Checkin Response rev 9 2024-05-04
suricata ET MOBILE_MALWARE Android/TrojanDropper.Agent.GWO Checkin rev 6 2024-05-04
suricata ET MALWARE CryptoWall Check-in M2 rev 6 2024-05-04
suricata ET MALWARE Win32/DTStealer CnC Activity rev 4 2024-05-04
suricata ET MOBILE_MALWARE Trojan-Dropper.AndroidOS.Anatsa Checkin rev 6 2024-05-04
suricata ET MALWARE Cobalt Strike Malleable C2 JQuery Custom Profile M2 rev 6 2024-05-04
suricata ET MALWARE BACKCONFIG CnC Downloader Activity rev 4 2024-05-04
suricata ET MALWARE Win32/Agent.XST Checkin rev 6 2024-05-04
suricata ET ADWARE_PUP Adware.MultiInstaller checkin 2 rev 7 2024-05-04
suricata ET MALWARE Nemucod JS Downloader June 12 2017 rev 8 2024-05-04
suricata ET MALWARE Win32/CollectorStealer CnC Exfil M3 rev 5 2024-05-04
suricata ET MALWARE Kimsuky Related CnC Activity rev 3 2024-05-04
suricata ET MALWARE Fileless infection dropped by EK CnC Beacon rev 6 2024-05-04
suricata ET MALWARE OSX/Mami CnC Checkin rev 6 2024-05-04
suricata ET MALWARE Ransomware Locky CnC Beacon 4 21 May rev 5 2024-05-04
suricata ET EXPLOIT_KIT RIG EK URI Struct Jun 13 2017 rev 7 2024-05-04
suricata ET MALWARE Win32/Rodecap/Travle/PYLOT CnC Checkin M2 rev 6 2024-05-04
suricata ET MALWARE AHK.CREDSTEALER.A CnC Activity rev 4 2024-05-04
suricata ET INFO I2P Retrieving reseed info rev 7 2024-05-04
suricata ET MALWARE W32/Nymaim Checkin M2 rev 15 2024-05-04
suricata ET P2P zzima_loader rev 8 2024-05-04
suricata ET MALWARE Win32/Backdoor.Dripion HTTP CnC Checkin rev 7 2024-05-04
snort ET TROJAN Nitrogen Loader Activity rev 1 2024-05-03
snort ET TROJAN Goldoon Botnet Payload Retrieval Attempt rev 1 2024-05-03
suricata ET MALWARE Goldoon Botnet Payload Retrieval Attempt rev 1 2024-05-03
suricata ET MALWARE Nitrogen Loader Activity rev 1 2024-05-03
sigma New Windows Firewall Rule Added Via New-NetFirewallRule Cmdlet test 2024-05-03
snort ET INFO Selenium Server Grid Chrome 3.141.59 - Vulnerable Version Detected rev 1 2024-05-02
snort ET EXPLOIT Selenium Server Grid Chrome 3.141.59 Remote Code Execution - Successful rev 1 2024-05-02
snort ET EXPLOIT Selenium Server Chrome 3.141.59 Remote Code Execution rev 2 2024-05-02
suricata ET EXPLOIT MikroTik RouterOS Chimay Red Remote Code Execution Probe rev 6 2024-05-02
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Acecard.c Checkin rev 8 2024-05-02
suricata ET MALWARE Win32/Neutrino Checkin 3 rev 7 2024-05-02
suricata ET EXPLOIT Multiple CCTV-DVR Vendors RCE rev 6 2024-05-02
suricata ET MOBILE_MALWARE Android/FakeKakao checkin 1 rev 6 2024-05-02
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Ermak.a Checkin rev 5 2024-05-02
suricata ET MALWARE Tordal/Hancitor/Chanitor Checkin rev 9 2024-05-02