Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET USER_AGENTS Aria2 User-Agent rev 4 2024-04-13
suricata ET EXPLOIT_KIT Capesand EK Visitor Tracking rev 3 2024-04-13
suricata ET MALWARE CDT Credphish/Netwire Campaign DNS Lookup rev 6 2024-04-13
suricata ET INFO IncrediMail Install Callback rev 6 2024-04-13
suricata ET HUNTING Suspicious HTTP POST Only Containing Pass - Possible Phishing rev 3 2024-04-13
suricata ET MALWARE Arkei Stealer Config Download Request rev 5 2024-04-13
suricata ET PHISHING Successful DHL Phish 2016-10-07 rev 5 2024-04-13
suricata ET PHISHING Successful Adobe Personalized Phish 2016-10-04 rev 7 2024-04-13
suricata ET PHISHING Successful Apple Store Phish M2 2016-12-29 rev 6 2024-04-13
suricata ET PHISHING Successful Universal Webmail Phish 2016-08-19 rev 7 2024-04-13
suricata ET PHISHING Successful Google Drive Phish 2016-12-22 rev 7 2024-04-13
suricata ET PHISHING Successful Generic Webmail Phish 2016-12-02 rev 7 2024-04-13
suricata ET PHISHING Possible Successful Docusign Phish 2015-07-27 rev 6 2024-04-13
suricata ET PHISHING Successful DHL Phish 2016-10-18 rev 5 2024-04-13
suricata ET PHISHING Successful Apple Suspended Account Phish M2 Aug 09 2016 rev 7 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 27 rev 6 2024-04-13
suricata ET PHISHING Successful DHL Phish 2016-09-16 rev 8 2024-04-13
suricata ET USER_AGENTS Dialer-967 User-Agent rev 12 2024-04-13
suricata ET PHISHING Successful Facebook Phish 2019-04-26 rev 4 2024-04-13
suricata ET PHISHING Successful Apple Phish 2016-10-05 rev 7 2024-04-13
suricata ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound rev 3 2024-04-13
suricata ET ADWARE_PUP PUP W32/DownloadGuide.D rev 5 2024-04-13
suricata ET MALWARE Mirai Botnet Domain Observed rev 6 2024-04-13
suricata ET PHISHING Successful Battle.net Phish 2015-09-22 rev 5 2024-04-13
suricata ET WEB_SERVER Binget PHP Library User Agent Inbound rev 5 2024-04-13
suricata ET PHISHING Successful Barclays Phish M1 2016-09-09 rev 6 2024-04-13
suricata ET MALWARE MSIL/KeyRedirEx Banker Receiving Exit Instruction rev 6 2024-04-13
suricata ET PHISHING Successful Postbank Online Banking Phish M2 2016-09-30 rev 5 2024-04-13
suricata ET PHISHING Successful IRS Phish 2016-01-23 rev 8 2024-04-13
suricata ET PHISHING Successful Wells Fargo Phish M1 2016-09-30 rev 8 2024-04-13
suricata ET PHISHING Successful Ameli.fr Phish M1 2016-10-26 rev 6 2024-04-13
suricata ET PHISHING Successful Bradesco Bank Phish M1 Jan 05 2017 rev 5 2024-04-13
suricata ET PHISHING Successful Paypal Phish M1 2016-11-17 rev 7 2024-04-13
suricata ET MOBILE_MALWARE Android/Bankbot.HH!tr DNS Lookup 6 rev 6 2024-04-13
suricata ET MALWARE DNS query for Known OphionLocker Domain rev 5 2024-04-13
suricata ET PHISHING Successful SFR Phishing 2015-11-24 rev 5 2024-04-13
suricata ET MALWARE Glupteba CnC Domain in DNS Lookup rev 4 2024-04-13
suricata ET MALWARE Glupteba CnC Domain in DNS Lookup rev 4 2024-04-13
suricata ET MALWARE CryptON/Nemesis/X3M Ransomware Onion Domain rev 6 2024-04-13
suricata ET PHISHING Successful Mailbox Renewal Phish 2016-08-19 rev 7 2024-04-13