Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Jaff Ransomware Checkin M1 rev 7 2024-04-14
suricata ET INFO Certificate with Unknown Content M2 rev 3 2024-04-14
suricata ET MALWARE Ixeshe/Mecklow Checkin 2 rev 10 2024-04-14
suricata ET MALWARE Tinba Banker CnC Response rev 6 2024-04-14
suricata ET MALWARE Cobalt Strike Malleable C2 OCSP Profile rev 7 2024-04-14
suricata ET MALWARE CozyDuke APT Possible SSL Cert 5 rev 6 2024-04-14
suricata ET PHISHING Terse POST to Wordpress Folder - Probable Successful Phishing M7 rev 5 2024-04-14
suricata ET P2P Ocelot BitTorrent Server in Use rev 5 2024-04-14
suricata ET CURRENT_EVENTS [Fireeye] Backdoor.HTTP.BEACON.[CSBundle NYTIMES Server] rev 5 2024-04-14
suricata ET MALWARE eCh0raix/QNAPCrypt CnC Activity - Done rev 6 2024-04-14
suricata ET MALWARE CozyDuke APT Possible SSL Cert 6 rev 6 2024-04-14
suricata ET MALWARE Win32/Trojan.Agent.AXMO CnC Beacon rev 6 2024-04-14
suricata ET ADWARE_PUP Suspicious User Agent EXE2 rev 7 2024-04-14
suricata ET INFO JAVA - Java Archive Download By Vulnerable Client rev 8 2024-04-14
suricata ET ADWARE_PUP EZULA Spyware User Agent rev 29 2024-04-14
suricata ET WEB_SERVER Possible Cherokee Web Server GET AUX Request Denial Of Service Attempt rev 6 2024-04-14
suricata ET WEB_SERVER JSP.SJavaWebManage WebShell Pass 20-09-2018 1 rev 4 2024-04-14
suricata ET WEB_SERVER WebShell - Generic - c99shell based POST structure rev 5 2024-04-14
suricata ET MALWARE Win32/TrojanDownloader.Waski.F Locker DL URI Struct Jul 25 2014 rev 7 2024-04-14
suricata ET WEB_SERVER Webmin RCE CVE-2019-15107 rev 7 2024-04-14
suricata ET MALWARE Windows Executable Sent When Remote Host Claims to Send a RAR Archive rev 7 2024-04-14
suricata ET MALWARE OilRig APT PowDesk Powershell Check rev 5 2024-04-14
suricata ET MALWARE Possible Zbot Activity Common Download Struct rev 8 2024-04-14
suricata ET MALWARE APT_NGO_wuaclt rev 8 2024-04-14
suricata ET WEB_SERVER Muieblackcat scanner rev 5 2024-04-14
suricata ET EXPLOIT_KIT RIG Exploit URI Struct March 20 2015 rev 6 2024-04-14
suricata ET MALWARE Waledac Beacon Traffic Detected rev 10 2024-04-14
suricata ET MALWARE Win32/Urausy.C response rev 6 2024-04-14
suricata ET MALWARE PlugX/Destory HTTP traffic rev 6 2024-04-14
suricata ET MALWARE W32/Emotet.v4 Checkin rev 10 2024-04-14
suricata ET MALWARE DarkGate CNC Checkin rev 7 2024-04-14
suricata ET MALWARE Unknown Trojan with Fake Java User-Agent rev 9 2024-04-14
suricata ET MALWARE Win32/Enosch.A gtalk connectivity check rev 8 2024-04-14
suricata ET MALWARE W32/GamesForum.InfoStealer Reporting to CnC rev 7 2024-04-14
suricata ET MALWARE PlugX Checkin rev 11 2024-04-14
suricata ET MALWARE Win32/Spy.Agent.OHT - AnunakAPT HTTP Checkin 2 rev 8 2024-04-14
suricata ET MALWARE Linux/Ssemgrvd sshd Backdoor HTTP CNC 2 rev 7 2024-04-14
suricata ET MALWARE Waledac FACEPUNCH Traffic Detected rev 12 2024-04-14
suricata ET MALWARE Win32/Unk.Joia CnC Activity rev 4 2024-04-14
suricata ET MALWARE Win32/Cryptrun.B Connectivity check rev 9 2024-04-14