Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Infostealer.Jackpos Checkin 2 rev 7 2024-04-30
suricata ET MALWARE Win32/CHAOS RAT/AlfaC2 Checkin rev 3 2024-04-30
suricata ET HUNTING Request to .TOP Domain with Minimal Headers rev 4 2024-04-30
suricata ET ADWARE_PUP CoinSurf Proxy Client Login rev 3 2024-04-30
suricata ET MALWARE Nemucod Downloading Payload 2 rev 6 2024-04-30
suricata ET ADWARE_PUP PUP TheSZ AutoUpdate CnC Beacon rev 7 2024-04-30
suricata ET MALWARE Suspected Trojan-Proxy Web Socket Connection Activity rev 2 2024-04-30
suricata ET MALWARE MSIL/Lightning Stealer Exfil Activity rev 3 2024-04-30
suricata ET MALWARE Win32.Rovnix.I Checkin rev 6 2024-04-30
suricata ET MALWARE Win32/Tofsee Connectivity Check M3 rev 4 2024-04-30
suricata ET MALWARE Likely Arid Viper APT Advtravel Campaign GET Keepalive rev 10 2024-04-30
suricata ET MALWARE Win32/Kaicone.A Checkin via HTTP POST rev 5 2024-04-30
suricata ET MALWARE PurpleFox Backdoor/Rootkit Download Server Response M4 rev 3 2024-04-30
suricata ET MALWARE Win32/Malgent!MSR User-Agent rev 3 2024-04-30
suricata ET MALWARE Observed Buran Ransomware UA rev 4 2024-04-30
suricata ET MALWARE Suspected ToddyCat APT Curlu Related Activity M2 rev 3 2024-04-30
suricata ET MALWARE Moose CnC Request M1 rev 7 2024-04-30
suricata ET MALWARE PunkeyPOS HTTP CnC Beacon 1 rev 6 2024-04-30
suricata ET MALWARE Ransomware Win32/WinPlock.A CnC Beacon 3 rev 7 2024-04-30
suricata ET ADWARE_PUP pdfspeedup Keep-Alive rev 3 2024-04-30
suricata ET INFO NSecSoft Remote Monitoring Update/Download Activity M1 rev 3 2024-04-30
suricata ET MALWARE Vawtrak/NeverQuest Posting Data rev 5 2024-04-30
suricata ET MALWARE TA450 Nagual CnC Activity rev 3 2024-04-30
suricata ET HUNTING Suspicious Terse Request for .pif rev 3 2024-04-30
suricata ET HUNTING Request to .CF Domain with Minimal Headers rev 4 2024-04-30
suricata ET EXPLOIT_KIT Possible Broken/Filtered RIG EK Payload Download rev 7 2024-04-30
suricata ET MOBILE_MALWARE AndroidOS/Lotoor.Q rev 8 2024-04-30
suricata ET MALWARE W32/Qakbot.Bot Version 8 CnC Beacon rev 6 2024-04-30
suricata ET MALWARE Possible MEME#4CHAN Exfil Activity rev 3 2024-04-30
suricata ET HUNTING jpg download from fileupload .site rev 3 2024-04-30
suricata ET MALWARE Win32/BLUELIGHT OAuth Login Attempt M2 rev 4 2024-04-30
suricata ET ADWARE_PUP SecureDriverUpdater Checkin rev 4 2024-04-30
suricata ET MALWARE PunkeyPOS HTTP CnC Beacon 4 rev 6 2024-04-30
suricata ET MALWARE Win32/Fluxer CnC Checkin rev 6 2024-04-30
suricata ET MOBILE_MALWARE Android/Kemoge Checkin 2 rev 5 2024-04-30
suricata ET MALWARE Win32/TrojanProxy.JpiProx.B CnC Beacon 1 rev 5 2024-04-30
suricata ET MALWARE JS/GootLoader CnC Exfil rev 4 2024-04-30
suricata ET MALWARE BlackEnergy POST Request rev 5 2024-04-30
suricata ET MALWARE EVILNUM CnC Connectivity Check rev 4 2024-04-30
suricata ET MALWARE AgentTesla PWS HTTP CnC Checkin rev 7 2024-04-30