Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Google Drive Phishing Landing 2015-11-17 rev 5 2024-04-28
suricata ET MALWARE DDG Botnet CnC Slave POST rev 3 2024-04-28
suricata ET MALWARE Bookworm CnC Beacon 2 rev 6 2024-04-28
suricata ET ADWARE_PUP PUP.GigaClicks Checkin rev 6 2024-04-28
suricata ET MALWARE Quant Loader Download Request rev 7 2024-04-28
suricata ET WEB_CLIENT Tech Support Phone Scam Landing M1 Oct 16 2016 rev 7 2024-04-28
suricata ET MALWARE PunkeyPOS HTTP CnC Beacon Fake UA rev 6 2024-04-28
suricata ET MALWARE vSkimmer.PoS Checkin rev 8 2024-04-28
suricata ET ADWARE_PUP Win32/Atshz.A Checkin rev 7 2024-04-28
suricata ET MALWARE MalDoc Retrieving Payload March 30 2017 rev 6 2024-04-28
suricata ET MALWARE Vawtrak/NeverQuest Checkin rev 5 2024-04-28
suricata ET USER_AGENTS FOCA User-Agent rev 8 2024-04-28
suricata ET MALWARE Win32/Scieron-A Checkin via HTTP POST rev 5 2024-04-28
suricata ET MALWARE Win32/Spy.Banker.AAXV Retrieving key from Pinterest rev 6 2024-04-28
suricata ET MALWARE PNScan.2 Inbound Status Check Response rev 6 2024-04-28
suricata ET MALWARE Win32/BanloadDownloader.XZY Retrieving Payload rev 6 2024-04-28
suricata ET MALWARE MS Office Macro Dridex Download URI Jan 7 2015 rev 8 2024-04-28
suricata ET MALWARE Backdoor.Elise CnC Beacon 3 M2 rev 9 2024-04-28
suricata ET MALWARE Sakula/Mivast RAT CnC Beacon 3 rev 6 2024-04-28
suricata ET MALWARE Win32.Sality-GR Checkin 2 rev 6 2024-04-28
suricata ET MALWARE Cobalt Strike Malleable C2 Webbug Profile rev 7 2024-04-28
suricata ET ADWARE_PUP ProxyGearPro Proxy Tool PUA rev 5 2024-04-28
suricata ET EXPLOIT_KIT RIG EK Broken/Filtered Payload Download Jun 19 2017 rev 6 2024-04-28
suricata ET MALWARE Android/AhMyth RAT Init Checkin rev 3 2024-04-28
suricata ET INFO Hola VPN Activity - X-Hola-* Headers rev 4 2024-04-28
suricata ET WEB_CLIENT Tech Support Phone Scam Landing M1 Jun 29 2016 rev 7 2024-04-28
suricata ET MALWARE Sakula/Mivast RAT CnC Beacon 6 rev 6 2024-04-28
suricata ET MALWARE Win32/TrickBot maserv Module CnC Activity rev 3 2024-04-28
suricata ET ADWARE_PUP Potentially Unwanted Application AirInstaller rev 11 2024-04-28
suricata ET MALWARE GlitchPOS CnC Checkin rev 6 2024-04-28
suricata ET MALWARE Databack CnC rev 6 2024-04-28
suricata ET EXPLOIT_KIT Possible Evil Redirector Leading to EK Nov 09 2015 M1 rev 6 2024-04-28
suricata ET MOBILE_MALWARE Android/Koler.C Checkin rev 10 2024-04-28
suricata ET MALWARE Medfos/Midhos Checkin rev 7 2024-04-28
suricata ET ADWARE_PUP GMUnpackerInstaller.A Checkin rev 7 2024-04-28
suricata ET EXPLOIT_KIT Possible Evil Redirector Leading to EK Nov 09 2015 M2 rev 10 2024-04-28
suricata ET MALWARE Gamaredon File Stealer POST rev 5 2024-04-28
suricata ET MALWARE Win32/Tobfy.S rev 8 2024-04-28
suricata ET INFO OneNote Notebook Downloaded via Powershell rev 4 2024-04-28
suricata ET MALWARE Quant Loader Download Request rev 7 2024-04-28