Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE WEBC2-CLOVER Checkin APT1 Related rev 5 2024-04-07
suricata ET WEB_SPECIFIC_APPS Achievo atknodetype parameter Local File Inclusion Vulnerability rev 6 2024-04-07
suricata ET MALWARE Common Upatre URI/Headers Struct rev 7 2024-04-07
suricata ET ADWARE_PUP W32/Stan Malvertising.Dropper CnC Beacon rev 6 2024-04-07
suricata ET MALWARE [CrowdStrike] ANCHOR PANDA - Adobe Gh0st Beacon rev 3 2024-04-07
suricata ET MALWARE Possible W32/VBKlip BAN Download rev 4 2024-04-07
suricata ET MALWARE Known Sinkhole Response Header rev 7 2024-04-07
suricata ET MALWARE CBReplay.P Ransomware rev 5 2024-04-07
suricata ET MALWARE Win32.Meredrop Checkin rev 6 2024-04-07
suricata ET EXPLOIT_KIT FlimKit hex.zip Java Downloading Jar rev 8 2024-04-07
suricata ET PHISHING PUBG Credential Phish Landing Page 2022-08-22 rev 2 2024-04-07
suricata ET EXPLOIT Supermicro BMC Password Disclosure 3 rev 6 2024-04-07
suricata ET WEB_SPECIFIC_APPS GetSimple CMS path parameter Local File Inclusion Attempt rev 4 2024-04-07
suricata ET EXPLOIT_KIT Redkit Exploit Kit Three Numerical Character Naming Convention PDF Request rev 4 2024-04-07
suricata ET MALWARE Citadel Checkin rev 6 2024-04-07
suricata ET MALWARE Backdoor.Win32/Likseput.A Checkin Windows Vista/7/8 rev 8 2024-04-07
suricata ET MALWARE Havex RAT CnC Server Response rev 5 2024-04-07
suricata ET SCAN Simple Slowloris Flooder rev 6 2024-04-07
suricata ET MALWARE Dorkbot Loader Payload Request rev 7 2024-04-07
suricata ET WEB_SPECIFIC_APPS Amateur Photographer Image Gallery file parameter Local File Inclusion Attempt rev 4 2024-04-07
suricata ET MALWARE FrauDrop Checkin rev 5 2024-04-07
suricata ET WEB_SERVER ATTACKER WebShell - Weevely - Cookie rev 4 2024-04-07
suricata ET MALWARE TripleNine RAT Checkin rev 9 2024-04-07
suricata ET MALWARE CommentCrew Possible APT c2 communications get command client key rev 6 2024-04-07
suricata ET INFO Control Panel Applet File Download rev 5 2024-04-07
suricata ET MALWARE W32/Siggen.Dropper CnC Beacon rev 5 2024-04-07
suricata ET WEB_SPECIFIC_APPS SiteGo file parameter Local File Inclusion Attempt rev 4 2024-04-07
suricata ET WEB_SPECIFIC_APPS RIPS function.php Local File Inclusion Vulnerability rev 4 2024-04-07
suricata ET MALWARE Galock Ransomware Check-in rev 5 2024-04-07
suricata ET MALWARE Possible Stitur Secondary Download rev 7 2024-04-07
suricata ET WEB_SPECIFIC_APPS Symantec Messaging Gateway 9.5.3-3 - Arbitrary file download 2 rev 6 2024-04-07
suricata ET MALWARE Poweliks Abnormal HTTP Headers high likelihood of Poweliks infection rev 7 2024-04-07
suricata ET WEB_SPECIFIC_APPS Free Blog Arbitrary File Deletion Attempt rev 6 2024-04-07
suricata ET WEB_SPECIFIC_APPS Joomla com_bit controller parameter Local File Inclusion Attempt rev 5 2024-04-07
suricata ET MALWARE Win32/Toby.N Multilocker Checkin rev 6 2024-04-07
suricata ET WEB_SERVER CVE-2014-6271 Attempt In HTTP Headers Line Continuation Evasion LF rev 5 2024-04-07
suricata ET MALWARE FakeAV security_scanner.exe rev 4 2024-04-07
suricata ET MALWARE ELF/Mayhem Checkin rev 6 2024-04-07
suricata ET MALWARE W32/Zbot.Variant CnC Response rev 8 2024-04-07
suricata ET MALWARE Zbot Generic URI/Header Struct .bin rev 12 2024-04-07