Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET EXPLOIT_KIT LightsOut EK POST Compromise POST rev 6 2024-04-07
suricata ET WEB_SPECIFIC_APPS SiteGo file parameter Local File Inclusion Attempt rev 4 2024-04-07
suricata ET MALWARE LankerBoy HTTP CnC Beacon rev 6 2024-04-07
suricata ET MALWARE Mal/Ransom-CE Connectivity Check rev 7 2024-04-07
suricata ET DOS HOIC with booster inbound rev 7 2024-04-07
suricata ET WEB_SPECIFIC_APPS Manhali download.php Local File Inclusion Vulnerability rev 4 2024-04-07
suricata ET WEB_SERVER HTTP POST Generic eval of base64_decode rev 5 2024-04-07
suricata ET EXPLOIT_KIT FlimKit hex.zip Java Downloading Jar rev 8 2024-04-07
suricata ET MALWARE Tinba Checkin 2 rev 10 2024-04-07
suricata ET MALWARE Backdoor.Win32/Dervec.gen Connectivity Check to Google rev 13 2024-04-07
suricata ET INFO Control Panel Applet File Download rev 5 2024-04-07
suricata ET MALWARE Havex RAT CnC Server Response rev 5 2024-04-07
suricata ET WEB_SPECIFIC_APPS CubeCart loc parameter Local File Inclusion Attempt rev 4 2024-04-07
suricata ET WEB_CLIENT DRIVEBY Social Engineering Toolkit JAR filename detected rev 5 2024-04-07
suricata ET WEB_SPECIFIC_APPS PRADO PHP Framework functional.php Local File Inclusion Vulnerability rev 5 2024-04-07
suricata ET MALWARE Possible W32/VBKlip BAN Download rev 4 2024-04-07
suricata ET MALWARE Banker Boleto Fraud JS_BROBAN.SM Checkin 3 rev 7 2024-04-07
suricata ET MALWARE Possible Red October proxy CnC 3 rev 5 2024-04-07
suricata ET WEB_SPECIFIC_APPS Wordpress Google Doc Embedder plugin file parameter Local File Inclusion Attempt rev 4 2024-04-07
suricata ET PHISHING PUBG Credential Phish Landing Page 2022-08-22 rev 2 2024-04-07
suricata ET MALWARE Possible Red October proxy CnC 1 rev 6 2024-04-07
suricata ET MALWARE CBReplay.P Ransomware rev 5 2024-04-07
suricata ET MALWARE Troj/ReRol.A Checkin 1 rev 8 2024-04-07
suricata ET MALWARE Win32.Meredrop Checkin rev 6 2024-04-07
suricata ET MALWARE Known Sinkhole Response Header rev 7 2024-04-07
suricata ET MALWARE Poweliks Abnormal HTTP Headers high likelihood of Poweliks infection rev 7 2024-04-07
suricata ET MALWARE Kronos Checkin rev 5 2024-04-07
suricata ET MALWARE ELF/Mayhem Checkin rev 6 2024-04-07
suricata ET WEB_SPECIFIC_APPS SiteGo OpenFolder parameter Local File Inclusion Attempt rev 4 2024-04-07
suricata ET MALWARE Possible Stitur Secondary Download rev 7 2024-04-07
suricata ET WEB_SERVER CVE-2014-6271 Attempt In HTTP Headers Line Continuation Evasion CRLF rev 6 2024-04-07
suricata ET WEB_SPECIFIC_APPS Free Blog Arbitrary File Deletion Attempt rev 6 2024-04-07
suricata ET MALWARE Havex RAT CnC Server Response HTML Tag rev 7 2024-04-07
suricata ET MALWARE Kuluoz/Asprox CnC Response rev 7 2024-04-07
suricata ET WEB_SPECIFIC_APPS Joomla com_bit controller parameter Local File Inclusion Attempt rev 5 2024-04-07
suricata ET MALWARE Backdoor.Win32/Likseput.A Checkin Windows Vista/7/8 rev 8 2024-04-07
suricata ET WEB_SPECIFIC_APPS WordPress Cloudsafe365 file parameter Local File Inclusion Attempt rev 4 2024-04-07
suricata ET MALWARE Downeks Checkin rev 6 2024-04-07
suricata ET MALWARE Troj/ReRol.A Checkin 2 rev 7 2024-04-07
suricata ET MALWARE Dyreza RAT Fake Server Header rev 7 2024-04-07