Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Spora Ransomware DNS Query rev 7 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 21 rev 6 2024-04-13
suricata ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server rev 3 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 45 rev 6 2024-04-13
suricata ET MALWARE Known Sinkhole Response Header INetSim rev 6 2024-04-13
suricata ET MOBILE_MALWARE IOS_XAGENT UA rev 6 2024-04-13
suricata ET EXPLOIT Eir D1000 Remote Command Injection Attempt Inbound rev 3 2024-04-13
suricata ET PHISHING Successful Paypal Phish M4 2016-12-13 rev 5 2024-04-13
suricata ET PHISHING Successful Yahoo Phish 2016-10-25 rev 5 2024-04-13
suricata ET PHISHING Successful DHL Phish 2015-09-17 rev 6 2024-04-13
suricata ET PHISHING Successful IBC Bank Phish 2015-10-29 rev 7 2024-04-13
suricata ET MALWARE Lazarus Decafett DNS Lookup 3 rev 6 2024-04-13
suricata ET MALWARE ServHelper CnC Inital Checkin rev 4 2024-04-13
suricata ET PHISHING Successful Free.fr Phish 2016-03-10 rev 6 2024-04-13
suricata ET MALWARE DNS Query for Cloud Atlas blackberry-support.herokuapp.com rev 7 2024-04-13
suricata ET PHISHING Successful iTunes Connect Phish M1 2016-12-13 rev 7 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup msonlinelive.com rev 6 2024-04-13
suricata ET PHISHING Successful Email Credential Phish 2015-08-12 rev 6 2024-04-13
suricata ET INFO localtunnel Connection Setup Attempt rev 5 2024-04-13
suricata ET PHISHING Successful Bank of America Phish M1 2016-11-23 rev 6 2024-04-13
suricata ET WEB_CLIENT Great Cannon DDoS JS M1 rev 5 2024-04-13
suricata ET PHISHING Successful Commonwealth Bank Phish 2015-08-20 rev 6 2024-04-13
suricata ET ADWARE_PUP Loadmoney.A Checkin 6 rev 10 2024-04-13
suricata ET PHISHING Successful Excel Phish Aug 15 2016 rev 6 2024-04-13
suricata ET MALWARE DNS Query for Known Chewbacca CnC Server rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish M1 2016-12-05 rev 8 2024-04-13
suricata ET PHISHING Successful DHL Phish 2016-11-15 rev 7 2024-04-13
suricata ET INFO Peach C++ Library User Agent Inbound rev 5 2024-04-13
suricata ET MOBILE_MALWARE DNS Query Targeted Tibetan Android Malware C2 Domain rev 8 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 33 rev 6 2024-04-13
suricata ET PHISHING Successful Google Docs Phish 2016-09-01 rev 5 2024-04-13
suricata ET PHISHING Successful Outlook Phish 2016-10-26 rev 7 2024-04-13
suricata ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 13 rev 6 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup checkmalware.info rev 7 2024-04-13
suricata ET MALWARE Cryptolocker .onion Proxy Domain rev 6 2024-04-13
suricata ET MALWARE Observed AridViper CnC Domain in TLS SNI rev 3 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2016-05-26 rev 5 2024-04-13
suricata ET PHISHING Successful Generic Phish 2016-09-08 rev 7 2024-04-13
suricata ET PHISHING Successful Canada Revenue Agency Phish 2015-08-18 rev 6 2024-04-13
suricata ET MALWARE TeslaCrypt/AlphaCrypt Payment DNS Lookup rev 5 2024-04-13