Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE SluttyPutty isDebuggerPresent in Fake Putty Executable rev 3 2024-04-14
suricata ET MALWARE PE EXE or DLL Windows file download disguised as ASCII rev 7 2024-04-14
suricata ET P2P Ocelot BitTorrent Server in Use rev 5 2024-04-14
suricata ET MALWARE eCh0raix/QNAPCrypt CnC Activity - Done rev 6 2024-04-14
suricata ET MALWARE CozyDuke APT Possible SSL Cert 6 rev 6 2024-04-14
suricata ET MALWARE CozyDuke APT Possible SSL Cert 5 rev 6 2024-04-14
suricata ET MALWARE Jaff Ransomware Checkin M1 rev 7 2024-04-14
suricata ET PHISHING Terse POST to Wordpress Folder - Probable Successful Phishing M7 rev 5 2024-04-14
suricata ET ADWARE_PUP Suspicious User Agent EXE2 rev 7 2024-04-14
suricata ET MALWARE Zeus Bot GET to Bing checking Internet connectivity rev 7 2024-04-14
suricata ET INFO Certificate with Unknown Content M2 rev 3 2024-04-14
suricata ET EXPLOIT Possible EXPLODINGCAN IIS5.0/6.0 Exploit Attempt rev 6 2024-04-14
suricata ET MALWARE W32/Jiwerks.A Checkin rev 7 2024-04-14
suricata ET WEB_SERVER Possible Cherokee Web Server GET AUX Request Denial Of Service Attempt rev 6 2024-04-14
suricata ET INFO JAVA - Java Archive Download By Vulnerable Client rev 8 2024-04-14
suricata ET MOBILE_MALWARE Trojan-Banker.AndroidOS.RedAlert CnC Beacon rev 8 2024-04-14
suricata ET HUNTING suspicious - uncompressed pack200-ed JAR rev 6 2024-04-14
suricata ET MALWARE W32/Briba CnC POST Beacon rev 7 2024-04-14
suricata ET MALWARE Potential Dridex.Maldoc Minimal Executable Request rev 12 2024-04-14
suricata ET MALWARE Zeus Bot GET to Google checking Internet connectivity rev 13 2024-04-14
suricata ET WEB_SERVER JSP.SJavaWebManage WebShell Pass 20-09-2018 2 rev 4 2024-04-14
suricata ET MALWARE [PTsecurity] Ursnif Encoded Payload Inbound rev 4 2024-04-14
suricata ET CURRENT_EVENTS [Fireeye] Backdoor.HTTP.BEACON.[CSBundle NYTIMES Server] rev 5 2024-04-14
suricata ET MALWARE Tinba Banker CnC Response rev 6 2024-04-14
suricata ET MALWARE HB_Banker16 Get rev 9 2024-04-14
sigma Malware User Agent test 2024-04-14
suricata ET PHISHING Successful Paypal Phish 2015-10-23 rev 7 2024-04-13
suricata ET PHISHING Successful Zimbra Phish 2015-10-30 rev 8 2024-04-13
suricata ET MALWARE APT28 DealersChoice DNS Lookup rev 6 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 5 rev 6 2024-04-13
suricata ET MALWARE APT32 Komprogo DNS Lookup rev 6 2024-04-13
suricata ET EXPLOIT_KIT BottleEK Landing rev 4 2024-04-13
suricata ET MALWARE APT28 Zebrocy/Zekapab CnC Checkin rev 4 2024-04-13
suricata ET MALWARE Ransomware/Cerber Onion Domain Lookup rev 5 2024-04-13
suricata ET PHISHING Successful Paypal Phish M2 2016-10-17 rev 7 2024-04-13
suricata ET PHISHING Successful Banco de la Nacion Phish 2016-10-18 rev 6 2024-04-13
suricata ET PHISHING Successful Tata Communications Phish 2016-08-19 rev 7 2024-04-13
suricata ET PHISHING Successful Workspace Phish 2016-01-26 rev 7 2024-04-13
suricata ET PHISHING Successful US Bank Phish 2016-06-09 M2 rev 5 2024-04-13
suricata ET PHISHING Successful Paypal Phish Mar 14 2017 rev 5 2024-04-13