Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE NetSupport RAT with System Information rev 6 2024-05-01
suricata ET MALWARE Matryoshka CnC Beacon 1 rev 6 2024-05-01
suricata ET MALWARE APT28/Sofacy Zebrocy Go Variant Checkin rev 5 2024-05-01
suricata ET INFO AutoIt User Agent Executable Request rev 10 2024-05-01
suricata ET MALWARE W32/Pterodo CnC Checkin rev 4 2024-05-01
suricata ET MALWARE JS/Unk Downloader 0 Byte POST CnC Checkin rev 6 2024-05-01
suricata ET MOBILE_MALWARE Android/Kemoge Checkin rev 6 2024-05-01
suricata ET INFO Metasploit Framework Checking For Update rev 9 2024-05-01
suricata ET MOBILE_MALWARE Android/Xnore Fake Facebook Login Credentials Collected rev 4 2024-05-01
suricata ET MALWARE APT28/Sofacy Zebrocy Secondary Payload CnC Checkin rev 4 2024-05-01
suricata ET INFO AutoIt User-Agent Downloading ZIP rev 7 2024-05-01
suricata ET MALWARE MSIL APT28 Zebrocy/Zekapab Reporting to CnC M2 rev 4 2024-05-01
suricata ET MALWARE Win32/CryptFile2 / Revenge Ransomware Checkin M3 rev 6 2024-05-01
suricata ET MALWARE Python.Ragua Checkin rev 7 2024-05-01
suricata ET MALWARE ELF/TooEasy Miner CnC Checkin rev 4 2024-05-01
suricata ET ADWARE_PUP Crossrider Spyware Checkin rev 8 2024-05-01
suricata ET MALWARE Win32/Phorpiex CnC Checkin rev 6 2024-05-01
suricata ET MALWARE TA399/SideWinder Stage 2 VBS Downloader Reporting Successful Infection rev 6 2024-05-01
suricata ET MALWARE Sinowal/sinonet/mebroot/Torpig infected host checkin rev 14 2024-05-01
suricata ET MALWARE Win32/ASPC Bot CnC Checkin M3 rev 7 2024-05-01
suricata ET MALWARE Win32/Formgrabber Data Exfil rev 5 2024-05-01
suricata ET MALWARE TeleBots VBS Backdoor CnC Beacon 1 rev 5 2024-05-01
suricata ET MOBILE_MALWARE MOONSHINE payload C2 activity rev 5 2024-05-01
suricata ET MALWARE jFect HTTP CnC Checkin rev 6 2024-05-01
suricata ET MALWARE AHK/BKDR_HTV.ZKGD-A CnC Checkin rev 5 2024-05-01
suricata ET EXPLOIT_KIT Possible PurpleFox EK Framework Flash GET Request rev 5 2024-05-01
suricata ET MALWARE Win32/DarkRAT CnC Activity rev 6 2024-05-01
suricata ET MALWARE Revcode RAT CnC 2 rev 5 2024-05-01
suricata ET ADWARE_PUP [eSentire] Win32/Adware.Adposhel.lgvk CnC Checkin rev 5 2024-05-01
suricata ET MALWARE OSX/LamePyre Screenshot Upload rev 5 2024-05-01
suricata ET MALWARE L0rdix Stealer CnC Sending Screenshot rev 4 2024-05-01
suricata ET WEB_SPECIFIC_APPS Jenkins Information Disclosure CVE-2017-1000395 rev 7 2024-05-01
suricata ET MALWARE Win32/Rarog Stealer CnC Keep-Alive rev 6 2024-05-01
suricata ET MALWARE Win32/Zemot Checkin rev 7 2024-05-01
suricata ET MALWARE TickGroup Datper CnC Checkin M1 rev 5 2024-05-01
suricata ET MOBILE_MALWARE Android/Comll.Banker RAT CnC Beacon rev 6 2024-05-01
suricata ET MALWARE CoinVault CnC Beacon M1 rev 6 2024-05-01
suricata ET MALWARE Possible Maldoc Downloader Aug 18 2017 rev 6 2024-05-01
suricata ET ADWARE_PUP Win32/InstallCore Initial Install Activity 1 rev 6 2024-05-01
suricata ET WEB_SPECIFIC_APPS Jenkins Chained Exploits CVE-2018-1000861 and CVE-2019-1003000 M1 rev 7 2024-05-01