Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Waledac Beacon Traffic Detected rev 10 2024-04-14
suricata ET MALWARE W32/GamesForum.InfoStealer Reporting to CnC rev 7 2024-04-14
suricata ET MALWARE Possible Zbot Activity Common Download Struct rev 8 2024-04-14
suricata ET MALWARE APT_NGO_wuaclt rev 8 2024-04-14
suricata ET MALWARE OilRig APT PowDesk Powershell Check rev 5 2024-04-14
suricata ET MALWARE Ransomware.Hidden-Tear Variant CnC Checkin rev 8 2024-04-14
suricata ET MALWARE Unknown Trojan with Fake Java User-Agent rev 9 2024-04-14
suricata ET MALWARE Win32/Urausy.C response rev 6 2024-04-14
suricata ET WEB_SERVER Muieblackcat scanner rev 5 2024-04-14
suricata ET MALWARE Vawtrak/NeverQuest Server Response rev 9 2024-04-14
suricata ET PHISHING Successful Canada Revenue Agency COVID-19 Assistance Eligability Phish 2020-04-01 rev 4 2024-04-14
suricata ET WEB_SERVER JSP.SJavaWebManage WebShell Pass 20-09-2018 2 rev 4 2024-04-14
suricata ET MALWARE Win32/Neutrino ping rev 8 2024-04-14
suricata ET MALWARE OSX/OceanLotus.D Requesting Commands from CnC rev 6 2024-04-14
suricata ET MALWARE Gamut Spambot Checkin Response rev 6 2024-04-14
suricata ET MALWARE Win32/Sarwent Variant CnC Activity rev 4 2024-04-14
suricata ET MALWARE Win32/Vflooder.C Connectivity Check rev 7 2024-04-14
suricata ET EXPLOIT_KIT Spelevo VBS Payload Downloaded rev 6 2024-04-14
suricata ET MALWARE Tortoiseshell/HMH Download Request rev 5 2024-04-14
suricata ET MALWARE BKDR_BTMINE.MNR BitCoin Miner Server Checkin rev 6 2024-04-14
suricata ET MALWARE CenterPOS CnC 2 rev 6 2024-04-14
suricata ET PHISHING Successful Mailbox Update Phish 2016-02-17 rev 8 2024-04-14
suricata ET MALWARE TrueBot/Silence.Downloader Keep-Alive rev 5 2024-04-14
suricata ET MALWARE Zeus Bot Connectivity Check rev 27 2024-04-14
suricata ET ADWARE_PUP Win32/Agent.PMS Variant CnC Activity rev 14 2024-04-14
suricata ET EXPLOIT_KIT RIG Exploit URI Struct March 20 2015 rev 6 2024-04-14
suricata ET MALWARE PlugX Checkin rev 11 2024-04-14
suricata ET MALWARE Windows Executable Sent When Remote Host Claims to Send a RAR Archive rev 7 2024-04-14
suricata ET MALWARE Win32/Enosch.A gtalk connectivity check rev 8 2024-04-14
suricata ET INFO Executable Download From DropBox rev 12 2024-04-14
suricata ET MALWARE Waledac FACEPUNCH Traffic Detected rev 12 2024-04-14
suricata ET MALWARE eCh0raix/QNAPCrypt CnC Activity - Started rev 6 2024-04-14
suricata ET MALWARE Chthonic CnC Beacon 5 rev 9 2024-04-14
suricata ET MALWARE Win32/Unk.Joia CnC Activity rev 4 2024-04-14
suricata ET MALWARE Win32/Spy.Agent.OHT - AnunakAPT HTTP Checkin 2 rev 8 2024-04-14
suricata ET MALWARE APT CozyCar SSL Cert 1 rev 5 2024-04-14
suricata ET MALWARE Linux/Ssemgrvd sshd Backdoor HTTP CNC 2 rev 7 2024-04-14
suricata ET WEB_SERVER Webmin RCE CVE-2019-15107 rev 7 2024-04-14
suricata ET MALWARE VPNFilter htpx Module C2 Request rev 6 2024-04-14
suricata ET MALWARE Possible Windows executable sent when remote host claims to send html content rev 20 2024-04-14