Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE RezoStealer CnC Checkin rev 2 2024-04-20
suricata ET EXPLOIT HP Enterprise VAN SDN Controller Exec Backdoor rev 4 2024-04-20
suricata ET MALWARE SuperFish CnC Beacon 2 rev 7 2024-04-20
suricata ET MALWARE Lemon_Duck Powershell CnC Checkin M2 rev 2 2024-04-20
suricata ET MALWARE Common Zbot EXE filename Dec 09 2013 rev 4 2024-04-20
suricata ET MALWARE LogPOS Sending Data rev 4 2024-04-20
suricata ET MALWARE APT.Fwits CnC Beacon M2 rev 4 2024-04-20
suricata ET MALWARE CBReplay Checkin rev 4 2024-04-20
suricata ET MALWARE Sharik/Smoke Loader Java Connectivity Check rev 5 2024-04-20
suricata ET MALWARE Oilrig Stealer CnC Checkin rev 3 2024-04-20
suricata ET MALWARE Hangover related campaign Checkin rev 4 2024-04-20
suricata ET MALWARE VikroStealer CnC Exfil rev 2 2024-04-20
suricata ET MALWARE JS/Ostap Maldoc Check-in rev 3 2024-04-20
suricata ET MALWARE Trojan.Nurjax Checkin rev 5 2024-04-20
suricata ET MALWARE Possible DANDERSPRITZ Default HTTP Headers rev 4 2024-04-20
suricata ET MALWARE Win32/7ev3n Ransomware Process Checkin rev 5 2024-04-20
suricata ET MALWARE BF Botnet CnC Checkin rev 2 2024-04-20
suricata ET INFO Nimiq Miner Initiating Mining Session with Skypool rev 3 2024-04-20
suricata ET MALWARE Ixeshe/Mecklow Checkin rev 13 2024-04-20
suricata ET MALWARE Win32/TrojanDownloader.Delf.BXC CnC Beacon rev 4 2024-04-20
suricata ET MALWARE Razy Variant Checkin rev 12 2024-04-20
suricata ET MALWARE Evrial Stealer Retrieving CnC Information rev 3 2024-04-20
suricata ET MALWARE W32/TrojanSpy.MSIL Set Done Day CnC Beacon rev 4 2024-04-20
suricata ET MALWARE L0rdix Stealer CnC Data Exfil rev 3 2024-04-20
suricata ET MALWARE CoinVault POST M2 rev 4 2024-04-20
suricata ET MALWARE Generic -POST To file.php w/Extended ASCII Characters rev 11 2024-04-20
suricata ET MALWARE Win32/Rarog Stealer CnC Checkin rev 2 2024-04-20
suricata ET MALWARE SolarBot Plugin Download MessageBox rev 4 2024-04-20
suricata ET MALWARE Win32/Geodo Checkin rev 12 2024-04-20
suricata ET ADWARE_PUP SoftwareTracking Site - Install Report rev 2 2024-04-20
suricata ET MALWARE Evrial Stealer CnC Activity rev 3 2024-04-20
suricata ET MALWARE Hangover related campaign Response rev 6 2024-04-20
suricata ET MALWARE SolarBot Plugin Download ComputerInfo rev 4 2024-04-20
suricata ET MALWARE Ransomware Locky CnC Beacon rev 8 2024-04-20
suricata ET MALWARE DarkHotel Initial Beacon rev 4 2024-04-20
suricata ET MALWARE ELF/Kinsing Payload Request M2 rev 2 2024-04-20
suricata ET MALWARE Win32/CollectorStealer CnC Exfil M2 rev 2 2024-04-20
suricata ET MALWARE W32/Citadel.Arx Variant CnC Beacon 1 rev 4 2024-04-20
suricata ET MALWARE [PT MALWARE] Hacked Mikrotik C2 Request rev 8 2024-04-20
suricata ET HUNTING Possible UPnP UUID Overflow Exploit Attempt from External Host - SUBSCRIBE/UNSUBSCRIBE rev 2 2024-04-20