Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE IIS Backdoor CnC Command Inbound rev 2 2024-04-26
suricata ET MALWARE Win32/WarHawk Checkin Activity rev 2 2024-04-26
suricata ET MALWARE Win32/RM3Loader Server Response rev 2 2024-04-26
suricata ET MALWARE VectorStealer Data Exfil via Telegram rev 2 2024-04-26
suricata ET HUNTING Suspicious Empty Accept-Encoding Header rev 3 2024-04-26
suricata ET EXPLOIT Shenzhen TVT DVR/NVR/IPC Hardcoded WebUI Login Attempt M1 rev 2 2024-04-26
suricata ET MALWARE ReverseRat 3.0 CnC Checkin M2 rev 2 2024-04-26
suricata ET MALWARE WhiteSnake Stealer Telegram Checkin rev 2 2024-04-26
suricata ET MALWARE Suspected Muggle Stealer Activity M2 rev 2 2024-04-26
suricata ET MALWARE Win32/PSW.LdPinch CnC Checkin rev 2 2024-04-26
suricata ET PHISHING HiYu - Request for Victim Enrichment rev 2 2024-04-26
suricata ET MALWARE Win32/Filecoder.OJC CnC Checkin rev 2 2024-04-26
suricata ET PHISHING Successful OWA Phish 2022-07-11 rev 2 2024-04-26
suricata ET INFO Gophish X-Server rev 4 2024-04-26
suricata ET MALWARE Havoc Framework CnC Request rev 2 2024-04-26
suricata ET MALWARE Win32/Agent.UOI CnC Checkin rev 2 2024-04-26
suricata ET MALWARE MSIL/Filecoder.EK CnC Checkin rev 2 2024-04-26
suricata ET HUNTING Terse Unencrypted Request for Google - Likely Connectivity Check rev 3 2024-04-26
suricata ET MALWARE MSIL/Spy.Agent.CSS Exfil rev 2 2024-04-26
suricata ET PHISHING Tech Support Phone Scam Landing 2023-04-17 rev 2 2024-04-26
suricata ET HUNTING Terse Request for WordPress Site ending in all digits rev 2 2024-04-26
suricata ET MALWARE Win32/Ymacco.AA60 Checkin rev 2 2024-04-26
suricata ET MALWARE MuddyWater APT Related Maldoc Checkin M1 rev 4 2024-04-26
suricata ET EXPLOIT Shenzhen TVT DVR/NVR/IPC Stack Overflow in Base64 Authorization Mechanism M1 rev 2 2024-04-26
suricata ET HUNTING Office User-Agent Requesting Non-Standard Filename rev 2 2024-04-26
suricata ET MALWARE ReverseRat 3.0 CnC Checkin M1 rev 2 2024-04-26
suricata ET HUNTING Possible Snake Header in HTTP Request rev 2 2024-04-26
suricata ET MALWARE DeltaStealer CnC Checkin rev 2 2024-04-26
suricata ET EXPLOIT Xiongmai/HiSilicon DVR - RTSP Buffer Overflow Attempt - CVE-2022-26259 rev 2 2024-04-26
suricata ET MALWARE MageCart Skimmer Header Observed Outbound rev 2 2024-04-26
suricata ET MALWARE 000Stealer Data Exfiltration M1 rev 3 2024-04-26
suricata ET MALWARE Suspected Muggle Stealer Activity M1 rev 2 2024-04-26
suricata ET PHISHING Nedbank Phishing Landing Page 2022-06-22 rev 2 2024-04-26
suricata ET MALWARE Win32/Valyria Maldoc Payload Request M1 rev 2 2024-04-26
suricata ET MALWARE Havoc Framework Header in HTTP Response rev 2 2024-04-26
suricata ET INFO [TW] IPFS Protocol HTTP Headers Observed rev 3 2024-04-26
suricata ET PHISHING Lucy Security - Phishing Landing Page M2 rev 2 2024-04-26
suricata ET MALWARE EICAR File Sent With X-Powered By Kaspersky Labs 2022-11-03 rev 2 2024-04-26
suricata ET MALWARE Win64/Agent.BP Checkin rev 2 2024-04-26
suricata ET MALWARE Win32/Shrine.A CnC Checkin rev 2 2024-04-26