Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Impots.gouv.fr Phish 2016-10-24 rev 7 2024-04-13
suricata ET PHISHING Terse POST to Wordpress Folder - Probable Successful Phishing M6 rev 5 2024-04-13
suricata ET PHISHING Successful Outlook Phish 2016-10-26 rev 7 2024-04-13
suricata ET INFO Wget Request for Executable rev 5 2024-04-13
suricata ET PHISHING Successful iCloud Phish Oct 10 2016 rev 6 2024-04-13
suricata ET PHISHING Successful Zimbra Account Phish 2015-10-23 rev 7 2024-04-13
suricata ET MALWARE Win32.Small.qh/xSock User-Agent Detected rev 9 2024-04-13
suricata ET MALWARE PS/Unk.EB.Spreader CnC Checkin rev 3 2024-04-13
suricata ET EXPLOIT HiSilicon DVR - Buffer Overflow in Builtin Web Server rev 5 2024-04-13
suricata ET PHISHING Successful National Australia Bank Phish 2016-12-02 rev 7 2024-04-13
suricata ET WEB_CLIENT Great Cannon DDoS JS M1 rev 5 2024-04-13
suricata ET PHISHING Successful Apple Phish M1 2016-11-15 rev 5 2024-04-13
suricata ET PHISHING Successful Halifax Bank Phish M1 2015-12-10 rev 7 2024-04-13
suricata ET MALWARE APT28 DealersChoice DNS Lookup rev 7 2024-04-13
suricata ET PHISHING Successful Formbuddy Credential Phish Submission 2016-01-15 rev 6 2024-04-13
suricata ET ADWARE_PUP Loadmoney.A Checkin 6 rev 10 2024-04-13
suricata ET MALWARE Observed AridViper CnC Domain in TLS SNI rev 3 2024-04-13
suricata ET PHISHING Successful Password Protected AMEX Phish 2016-12-09 rev 6 2024-04-13
suricata ET PHISHING Successful Facebook Phish 2020-01-10 rev 4 2024-04-13
suricata ET MALWARE APT32 Komprogo DNS Lookup rev 7 2024-04-13
suricata ET PHISHING Successful Webmail Phish 2015-08-27 rev 8 2024-04-13
suricata ET MALWARE Critroni Variant .onion Proxy Domain rev 5 2024-04-13
suricata ET PHISHING Successful Monzo Credential Phish M2 2022-02-17 rev 3 2024-04-13
suricata ET SCAN Grabber.py Web Scan Detected rev 9 2024-04-13
suricata ET PHISHING Successful Apple Phish Oct 31 2016 rev 7 2024-04-13
suricata ET MALWARE W32/Fullstuff Initial Checkin rev 6 2024-04-13
suricata ET PHISHING Successful WhatsApp Payment Phish 2016-09-01 rev 7 2024-04-13
suricata ET MALWARE Possible Outbound WebShell GIF rev 5 2024-04-13
suricata ET PHISHING Successful Webmail Update Phish 2015-10-08 rev 7 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 6 rev 6 2024-04-13
suricata ET MALWARE Critroni Variant .onion Proxy Domain rev 5 2024-04-13
suricata ET PHISHING Successful Gmail Phish M2 2016-10-12 rev 5 2024-04-13
suricata ET PHISHING Successful Webmail Account Phish 2015-09-02 rev 7 2024-04-13
suricata ET PHISHING Successful Mailbox Shutdown Phish M1 2016-05-16 rev 6 2024-04-13
suricata ET MALWARE Observed AridViper CnC Domain in TLS SNI rev 3 2024-04-13
suricata ET MALWARE Observed SystemBC CnC Domain in DNS Query rev 3 2024-04-13
suricata ET PHISHING Successful Barclays Phish M1 2016-10-06 rev 6 2024-04-13
suricata ET PHISHING Successful Bradesco Bank Phish M2 Jan 05 2017 rev 7 2024-04-13
suricata ET PHISHING Successful US Bank Phish M1 2015-12-22 rev 7 2024-04-13
suricata ET HUNTING Possible Malicious Document Request to .tk domain rev 4 2024-04-13