Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_CLIENT Tech Support Phone Scam Landing M1 Oct 16 2016 rev 7 2024-04-28
suricata ET MALWARE Gamarue/Andromeda Downloading Payload rev 5 2024-04-28
suricata ET MALWARE Vawtrak/NeverQuest - Post Data Form 01 rev 6 2024-04-28
suricata ET MALWARE W32/Dridex Binary Download Mar 23 2016 rev 7 2024-04-28
suricata ET MALWARE STRRAT Requesting License Check rev 3 2024-04-28
suricata ET MALWARE TA421 Wineloader CnC Checkin M2 rev 2 2024-04-28
suricata ET MALWARE Win32/TrickBot maserv Module CnC Activity rev 3 2024-04-28
suricata ET MALWARE Win32/Reconyc.equo Checkin rev 7 2024-04-28
suricata ET MALWARE Citadel Activity POST rev 7 2024-04-28
suricata ET MALWARE Sakula/Mivast RAT CnC Beacon 6 rev 6 2024-04-28
suricata ET ADWARE_PUP MultiPlug.A checkin rev 6 2024-04-28
suricata ET MALWARE Android/AhMyth RAT Init Checkin rev 3 2024-04-28
suricata ET WEB_CLIENT Tech Support Phone Scam Landing M1 Jun 29 2016 rev 7 2024-04-28
suricata ET ADWARE_PUP Potentially Unwanted Application AirInstaller rev 11 2024-04-28
suricata ET MALWARE Win32.Sality-GR Checkin 2 rev 6 2024-04-28
suricata ET MALWARE Cobalt Strike Malleable C2 Webbug Profile rev 7 2024-04-28
suricata ET INFO Hola VPN Activity - X-Hola-* Headers rev 4 2024-04-28
suricata ET ADWARE_PUP ProxyGearPro Proxy Tool PUA rev 5 2024-04-28
suricata ET EXPLOIT_KIT RIG EK Broken/Filtered Payload Download Jun 19 2017 rev 6 2024-04-28
suricata ET MALWARE Possible Kimsuky Related Malicious VBScript rev 4 2024-04-28
suricata ET MALWARE Poweliks Clickfraud CnC M2 rev 6 2024-04-28
suricata ET MOBILE_MALWARE Android.Stealthgenie Checkin rev 7 2024-04-28
suricata ET HUNTING Download Request Containing Suspicious Filename - Crypted rev 5 2024-04-28
suricata ET MALWARE STRRAT Initial HTTP Activity rev 3 2024-04-28
suricata ET MALWARE Ursnif Variant CnC Beacon 3 rev 5 2024-04-28
suricata ET MALWARE Quant Loader Download Request rev 7 2024-04-28
suricata ET INFO OneNote Notebook Downloaded via Powershell rev 4 2024-04-28
suricata ET MALWARE X-Malware-Sinkhole Header in HTTP Response rev 5 2024-04-28
suricata ET EXPLOIT_KIT Possible Evil Redirector Leading to EK Nov 09 2015 M2 rev 10 2024-04-28
suricata ET PHISHING Data Submitted to Weebly.com - Possible Phishing rev 5 2024-04-28
suricata ET MALWARE Sakula/Mivast RAT CnC Beacon 2 rev 6 2024-04-28
suricata ET MALWARE DDG Botnet CnC Job Request rev 4 2024-04-28
suricata ET MOBILE_MALWARE Android/Koler.C Checkin rev 10 2024-04-28
suricata ET MALWARE JS/HTA Downloader Behavior M3 rev 8 2024-04-28
suricata ET MALWARE Echelon/DarkStealer Variant CnC Exfil M2 rev 3 2024-04-28
suricata ET MALWARE Quant Loader Download Request rev 7 2024-04-28
suricata ET MALWARE PunkeyPOS HTTP CnC Beacon Fake UA rev 6 2024-04-28
suricata ET MALWARE MalDoc Retrieving Payload March 30 2017 rev 6 2024-04-28
suricata ET ADWARE_PUP Win32/Atshz.A Checkin rev 7 2024-04-28
suricata ET MALWARE Bookworm CnC Beacon rev 6 2024-04-28