Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET EXPLOIT Possible WePresent WIPG1000 OS Command Injection rev 5 2024-04-13
suricata ET MALWARE Observed SystemBC CnC Domain in DNS Query rev 3 2024-04-13
suricata ET MALWARE ShellCrew.APT StreamEx DNS Lookup 22 rev 6 2024-04-13
suricata ET PHISHING Terse POST to Wordpress Folder - Probable Successful Phishing rev 6 2024-04-13
suricata ET PHISHING Successful Paypal Phish 2016-01-15 M2 rev 5 2024-04-13
suricata ET PHISHING Successful HBL Bank Phish M1 2016-10-12 rev 8 2024-04-13
suricata ET INFO OpenVPN Update Check rev 6 2024-04-13
suricata ET MALWARE hacker87 checkin rev 7 2024-04-13
suricata ET PHISHING Successful DHL Phish 2016-09-16 rev 8 2024-04-13
suricata ET PHISHING Netsolhost SSL Proxying - Possible Phishing Nov 24 2015 rev 7 2024-04-13
suricata ET MALWARE Ransomware Locky .onion Payment Domain rev 5 2024-04-13
suricata ET SCAN DominoHunter Security Scan in Progress rev 5 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup securitypractic.com rev 7 2024-04-13
suricata ET HUNTING Possible Malicious Document Request to .tk domain rev 4 2024-04-13
suricata ET MALWARE Win32/TaskPerformer Downloader CnC Activity rev 3 2024-04-13
suricata ET PHISHING Successful Blocked Email Account Phish M1 2016-08-23 rev 6 2024-04-13
suricata ET PHISHING Successful USAA Phish 2015-09-05 rev 7 2024-04-13
suricata ET PHISHING Successful Dropbox/Docusign Phish 2016-10-28 rev 6 2024-04-13
suricata ET PHISHING Successful Wells Fargo Phish 2016-11-28 rev 7 2024-04-13
suricata ET PHISHING Suspicious Generic Login - Possible Successful Phish 2019-01-02 rev 3 2024-04-13
suricata ET PHISHING Successful ABSA Phish 2016-10-26 rev 6 2024-04-13
suricata ET MALWARE Sofacy DNS Lookup rev 6 2024-04-13
suricata ET PHISHING L33bo Phishing Kit - Successful Credential Phish M4 2016-03-29 rev 6 2024-04-13
suricata ET PHISHING Successful Alibaba Phish 2016-10-26 rev 6 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 20 rev 6 2024-04-13
suricata ET PHISHING GOV UK Possible COVID-19 Phish 2020-04-06 rev 4 2024-04-13
suricata ET MALWARE Scarlet Mimic DNS Lookup 15 rev 6 2024-04-13
suricata ET MALWARE ABUSE.CH Locky Domain rev 5 2024-04-13
suricata ET MALWARE Ransomware/Cerber Onion Domain Lookup rev 5 2024-04-13
suricata ET MALWARE Ransomware Locky Possible Payment Page rev 5 2024-04-13
suricata ET PHISHING Successful Webmail Account Phish 2015-09-02 rev 7 2024-04-13
suricata ET MALWARE Win32/Pift Checkin 2 rev 5 2024-04-13
suricata ET PHISHING Successful Discover Phish M2 2016-12-14 rev 8 2024-04-13
suricata ET MALWARE Possible Outbound WebShell GIF rev 5 2024-04-13
suricata ET MALWARE Arkei Stealer Config Download Request rev 5 2024-04-13
suricata ET MALWARE Kazy Checkin rev 10 2024-04-13
suricata ET PHISHING Successful Chase Phish 2015-09-24 rev 6 2024-04-13
suricata ET PHISHING Successful Bradesco Bank Phish M1 Jan 05 2017 rev 5 2024-04-13
suricata ET PHISHING Possible Interac Phish Aug 18 2017 rev 4 2024-04-13
suricata ET PHISHING Successful Mailbox Renewal Phish 2016-08-19 rev 7 2024-04-13