Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Possible Royal Road Payload Retrieval Attempt rev 1 2024-04-29
snort ET TROJAN Bookworm CnC Beacon 2 rev 3 2024-04-29
snort ET TROJAN Backdoor.Elise CnC Beacon 2 rev 4 2024-04-29
snort ET TROJAN Quant Loader Download Request rev 3 2024-04-29
suricata ET MALWARE Jupyter Stealer Reporting System Information M2 rev 5 2024-04-29
suricata ET WEB_SPECIFIC_APPS Ruijie Network Switches Unauthenticated Command Execution rev 2 2024-04-29
suricata ET MALWARE Win32/CollectorStealer - Uploading System Information rev 4 2024-04-29
suricata ET MALWARE FOX-SRT ShimRatReporter check-in rev 6 2024-04-29
suricata ET MALWARE Win32/Nemty Ransomware Style Geo IP Check M2 rev 5 2024-04-29
suricata ET HUNTING SUSPICIOUS EXE Download from Google Common Data Storage with no Referer rev 6 2024-04-29
suricata ET MALWARE Emotet Wifi Bruter Module Checkin rev 4 2024-04-29
suricata ET MALWARE Likely FakeAV/Fakeinit/FraudLoad Checkin rev 10 2024-04-29
suricata ET ADWARE_PUP Win32/Adware.Adposhel.A Checkin M6 rev 5 2024-04-29
suricata ET MALWARE Win32/Kryptik.HMCH Dropper User-Agent M4 rev 3 2024-04-29
suricata ET MOBILE_MALWARE Android Vultr Checkin rev 5 2024-04-29
suricata ET MALWARE Win32/Spyder CnC Checkin rev 3 2024-04-29
suricata ET INFO XenArmor Password Recovery License Check rev 3 2024-04-29
suricata ET MALWARE CollectorStealer CnC Exfil rev 3 2024-04-29
suricata ET MALWARE JS/Nemucod.M.gen requesting EXE payload 2015-11-02 rev 6 2024-04-29
suricata ET MALWARE Suspected Glupteba Download rev 3 2024-04-29
suricata ET MALWARE Win32/Kryptik.HMCH Dropper User-Agent M1 rev 3 2024-04-29
suricata ET MALWARE Possible Royal Road Payload Retrieval Attempt rev 1 2024-04-29
suricata ET MALWARE [PTsecurity] Kuriyama Loader Checkin rev 8 2024-04-29
suricata ET MALWARE NORTHSTAR Client Data POST rev 3 2024-04-29
suricata ET MALWARE Worm.Win32.Balucaf.A Checkin rev 8 2024-04-29
suricata ET WEB_SERVER SLIGHTPULSE WebShell Access Inbound M1 rev 3 2024-04-29
suricata ET MALWARE [PTsecurity] TR/Spy.Banker.agdtw Checkin rev 4 2024-04-29
suricata ET HUNTING EXE Downloaded from Github rev 3 2024-04-29
suricata ET MALWARE AlphaCrypt CnC Beacon 5 rev 6 2024-04-29
suricata ET MALWARE Win32/TrickBot Anchor Variant Style External IP Check rev 3 2024-04-29
suricata ET MALWARE Win32/MarioLoader Login Panel rev 1 2024-04-29
suricata ET MALWARE RocketMan Win32/Drun rev 6 2024-04-29
suricata ET MALWARE Win32/Nemty Ransomware Style Geo IP Check M1 rev 5 2024-04-29
suricata ET MALWARE W32/Alina.POS-Trojan Checkin rev 6 2024-04-29
suricata ET MALWARE Java/QRat Retrieving PE rev 5 2024-04-29
suricata ET MALWARE Win32/Vodkagats Loader Requesting Payload rev 4 2024-04-29
suricata ET MALWARE Win32/RCAP CnC Checkin rev 5 2024-04-29
suricata ET MALWARE Win32/7ev3n Ransomware Initial Checkin rev 5 2024-04-29
suricata ET MALWARE Vidar/Arkei/Megumin/Oski Stealer Data Exfil rev 4 2024-04-29
suricata ET MALWARE DDG Botnet Miner Download rev 4 2024-04-29