Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
sigma Potentially Suspicious Execution Of PDQDeployRunner test 2024-05-02
snort ET TROJAN Vawtrak HTTP CnC Beacon rev 9 2024-05-01
suricata ET WEB_SPECIFIC_APPS Jenkins Pre-auth User Information Leakage rev 6 2024-05-01
suricata ET ADWARE_PUP DealPly Adware CnC Beacon 4 rev 6 2024-05-01
suricata ET MALWARE Win32/ASPC Bot CnC Checkin M3 rev 7 2024-05-01
suricata ET MALWARE TA399/SideWinder Stage 2 VBS Downloader Reporting Successful Infection rev 6 2024-05-01
suricata ET MALWARE ICEFOG JAVAFOG JAR checkin rev 8 2024-05-01
suricata ET MALWARE AHK/BKDR_HTV.ZKGD-A CnC Checkin rev 5 2024-05-01
suricata ET MALWARE MSIL/Unk.HT-Based Ransomware CnC Checkin rev 5 2024-05-01
suricata ET MOBILE_MALWARE MOONSHINE payload C2 activity rev 5 2024-05-01
suricata ET ADWARE_PUP DealPly Adware CnC Beacon 2 rev 7 2024-05-01
suricata ET EXPLOIT_KIT Possible PurpleFox EK Framework Flash GET Request rev 5 2024-05-01
suricata ET MALWARE Andromeda Checkin Dec 29 2014 rev 7 2024-05-01
suricata ET ADWARE_PUP Rogue.WinPCDefender Checkin rev 8 2024-05-01
suricata ET MALWARE Win32.TreasureHunter Checkin rev 5 2024-05-01
suricata ET ADWARE_PUP W32/BettrExperience.Adware Initial Checkin rev 7 2024-05-01
suricata ET MALWARE Possible Sharik/Smoke Loader Microsoft Connectivity check rev 6 2024-05-01
suricata ET ADWARE_PUP MALWARE W32/WinWrapper.Adware User-Agent rev 8 2024-05-01
suricata ET MALWARE JasperLoader CnC Checkin rev 6 2024-05-01
suricata ET MALWARE Xwo CnC Activity rev 5 2024-05-01
suricata ET MALWARE VBS/TrojanDownloader.Agent.SEB Reporting Network Info rev 4 2024-05-01
suricata ET MALWARE StealerNeko CnC Checkin rev 5 2024-05-01
suricata ET MALWARE Generic Win32.Autorun HTTP Post rev 11 2024-05-01
suricata ET MALWARE Win32/Retadup CnC Checkin M1 rev 5 2024-05-01
suricata ET ADWARE_PUP Loadmoney Checkin 4 rev 8 2024-05-01
suricata ET MALWARE APT28/Sofacy Zebrocy Go Variant CnC Activity rev 4 2024-05-01
suricata ET MALWARE Win32/Onliner CnC Checkin rev 5 2024-05-01
suricata ET MALWARE OilRig OopsIE CnC Checkin M3 rev 5 2024-05-01
suricata ET ADWARE_PUP MALWARE W32/WinWrapper.Adware POST CnC Beacon rev 8 2024-05-01
suricata ET MOBILE_MALWARE Android/BasBanke CnC Checkin rev 4 2024-05-01
suricata ET MALWARE Arid Viper APT Exfiltrating files rev 6 2024-05-01
suricata ET MALWARE ApolloLocker Ransomware CnC Checkin 2 rev 5 2024-05-01
suricata ET ADWARE_PUP DealPly Adware CnC Beacon 3 rev 6 2024-05-01
suricata ET EXPLOIT_KIT Bingo EK Payload Download rev 6 2024-05-01
suricata ET MALWARE ELF/Chacha.DDoS/Xor.DDoS Stage 2 CnC Checkin rev 4 2024-05-01
suricata ET INFO DLL File Download Request via Discord rev 3 2024-05-01
suricata ET MALWARE HYDSEVEN VBS CnC Host Information Checkin rev 5 2024-05-01
suricata ET EXPLOIT HP Enterprise VAN SDN Controller Upload Backdoor 2 rev 6 2024-05-01
suricata ET MALWARE TeleBots VBS Backdoor CnC Beacon 1 rev 5 2024-05-01
suricata ET MALWARE Win32/TrojanProxy.JpiProx.B CnC Beacon 2 rev 6 2024-05-01