Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Win32/Hancitor Checkin rev 3 2024-04-29
suricata ET MALWARE JS/Nemucod.M.gen requesting EXE payload 2015-11-02 rev 6 2024-04-29
suricata ET MALWARE Suspected Glupteba Download rev 3 2024-04-29
suricata ET MALWARE FinSpy Related Flash Installer Activity rev 3 2024-04-29
suricata ET MALWARE Win32/Vodkagats Loader Requesting Payload rev 4 2024-04-29
suricata ET MALWARE Win32/Kryptik.HMCH Dropper User-Agent M1 rev 3 2024-04-29
suricata ET MALWARE Win32/RCAP CnC Checkin rev 5 2024-04-29
suricata ET MALWARE [PTsecurity] Kuriyama Loader Checkin rev 8 2024-04-29
suricata ET HUNTING EXE Downloaded from Github rev 3 2024-04-29
suricata ET MALWARE JS/Nemucod.M.gen requesting PDF payload 2015-11-02 rev 6 2024-04-29
suricata ET MALWARE Win32/Infostealer.Snifula File Upload rev 5 2024-04-29
suricata ET WEB_SERVER SLIGHTPULSE WebShell Access Inbound M1 rev 3 2024-04-29
suricata ET MALWARE Win32/MailerBot CnC Activity rev 3 2024-04-29
suricata ET MALWARE Likely FakeAV/Fakeinit/FraudLoad Checkin rev 10 2024-04-29
suricata ET INFO XenArmor Password Recovery License Check rev 3 2024-04-29
suricata ET MALWARE CollectorStealer CnC Exfil rev 3 2024-04-29
suricata ET MOBILE_MALWARE Android Vultr Checkin rev 5 2024-04-29
suricata ET ADWARE_PUP TopTools PUP Install Activity rev 6 2024-04-29
suricata ET HUNTING SUSPICIOUS EXE Download from Google Common Data Storage with no Referer rev 6 2024-04-29
suricata ET MALWARE FOX-SRT ShimRatReporter check-in rev 6 2024-04-29
suricata ET MALWARE Jupyter Stealer Reporting System Information M2 rev 5 2024-04-29
suricata ET MALWARE Win32/Nemty Ransomware Style Geo IP Check M2 rev 5 2024-04-29
suricata ET MALWARE Emotet Wifi Bruter Module Checkin rev 4 2024-04-29
sigma Use Icacls to Hide File to Everyone test 2024-04-29
suricata ET MOBILE_MALWARE Android/Koler.C Checkin rev 10 2024-04-28
suricata ET EXPLOIT Linksys Router Unauthenticated Remote Code Execution rev 6 2024-04-28
suricata ET MALWARE Yahoyah CnC Beacon rev 5 2024-04-28
suricata ET MALWARE Sakula/Mivast RAT CnC Beacon 3 rev 6 2024-04-28
suricata ET MALWARE Win32/BanloadDownloader.XZY Retrieving Payload rev 6 2024-04-28
suricata ET MALWARE Possible OceanLotus C2 Checkin rev 5 2024-04-28
suricata ET MALWARE Backdoor.Elise CnC Beacon 3 M2 rev 9 2024-04-28
suricata ET MALWARE Win32/Spy.Banker.AAXV Retrieving key from Pinterest rev 6 2024-04-28
suricata ET MALWARE Possible Kimsuky Related Malicious VBScript rev 4 2024-04-28
suricata ET MALWARE Locky Intermediate Downloader rev 4 2024-04-28
suricata ET MALWARE JS/Nemucod requesting EXE payload 2015-12-01 rev 8 2024-04-28
suricata ET MALWARE ArtraDownloader/TeleRAT Checkin rev 6 2024-04-28
suricata ET MALWARE Sakula/Mivast RAT CnC Beacon 7 rev 7 2024-04-28
suricata ET MALWARE X-Malware-Sinkhole Header in HTTP Response rev 5 2024-04-28
suricata ET PHISHING Bank of America Phishing Landing Aug 19 2015 rev 7 2024-04-28
suricata ET PHISHING Data Submitted to Weebly.com - Possible Phishing rev 5 2024-04-28