Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE W32/Ke3chang.Dream.APT Campaign CnC Beacon 2 rev 4 2024-04-12
suricata ET WEB_SERVER UA WordPress probable DDOS-Attack rev 7 2024-04-12
suricata ET PHISHING Successful O2 Phish 2018-03-12 rev 3 2024-04-12
suricata ET MALWARE W32/Dexter Infostealer CnC POST rev 4 2024-04-12
suricata ET MALWARE DecebalPOS User-Agent rev 5 2024-04-12
suricata ET MALWARE Trojan Internet Connectivity Check rev 7 2024-04-12
suricata ET EXPLOIT Netgear R7000 Command Injection Exploit rev 4 2024-04-12
suricata ET MALWARE Zeus POST Request to CnC sk1 and bn1 post parameters rev 8 2024-04-12
suricata ET EXPLOIT Netis E1+ 1.2.32533 - Unauthenticated WiFi Password Leak rev 3 2024-04-12
suricata ET PHISHING Successful World Health Organization COVID-19 Phish 2020-03-23 rev 4 2024-04-12
suricata ET MALWARE MSUpdater Connectivity Check to Google rev 4 2024-04-12
suricata ET MALWARE Anchor_DNS Trickbot DNS CnC Command - Prepare to Receive Data rev 3 2024-04-12
suricata ET USER_AGENTS Steam HTTP Client User-Agent rev 3 2024-04-12
suricata ET INFO JAR Size Under 30K Size - Potentially Hostile rev 9 2024-04-12
suricata ET WEB_SERVER WebShell - ASPyder - File Browser - POST Structure rev 4 2024-04-12
suricata ET MALWARE Lyposit Ransomware Checkin 1 rev 9 2024-04-12
suricata ET MALWARE Win32/Nubjub.A HTTP Check-in rev 8 2024-04-12
suricata ET MALWARE Win32/Sisproc Variant POST to CnC Server rev 6 2024-04-12
suricata ET MALWARE MINEBRIDGE CnC Request rev 3 2024-04-12
suricata ET MALWARE W32/Asprox php.dll.crp POST CnC Beacon rev 6 2024-04-12
suricata ET MALWARE W32/PointOfSales.Misc CnC Activity rev 5 2024-04-12
suricata ET MALWARE CozyDuke APT Possible SSL Cert 8 rev 7 2024-04-12
suricata ET MOBILE_MALWARE CoolReaper User-Agent rev 5 2024-04-12
suricata ET USER_AGENTS Ufasoft bitcoin Related User-Agent rev 7 2024-04-12
suricata ET PHISHING Successful Microsoft Account Phish 2020-03-04 rev 3 2024-04-12
suricata ET MALWARE Trojan-Downloader.Win32.AutoIt.mj Checkin rev 5 2024-04-12
suricata ET MALWARE [PTsecurity] Win32/Randrew!rfn CnC Activity rev 4 2024-04-12
suricata ET MALWARE Qtloader encrypted check-in Oct 19 M1 rev 4 2024-04-12
suricata ET MALWARE VBulletin Backdoor C2 URI Structure rev 6 2024-04-12
suricata ET SCAN ZmEu exploit scanner rev 11 2024-04-12
suricata ET MALWARE W32/Zemra.DDoS.Bot Variant CnC Beacon rev 5 2024-04-12
suricata ET MALWARE W32/Liftoh.Downloader Get Final Payload Request rev 5 2024-04-12
suricata ET MALWARE Possible Win32/SillyFDC WordPress Traffic rev 5 2024-04-12
suricata ET DOS LOIC POST rev 6 2024-04-12
suricata ET MALWARE W32/Karagany.Downloader CnC Beacon rev 4 2024-04-12
suricata ET MALWARE OLDBAIT Checkin 2 brvc rev 4 2024-04-12
suricata ET MALWARE Trojan-Spy.Win32.KeyLogger.acuj Checkin rev 6 2024-04-12
suricata ET PHISHING Possible Compromised Wordpress - Generic Phishing Landing 2018-01-22 rev 3 2024-04-12
suricata ET PHISHING Successful Yobit Cryptocurrency Exchange Phish 2017-12-28 rev 4 2024-04-12
suricata ET MALWARE MINEBRIDGE CnC Response rev 3 2024-04-12