Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
sigma Invoke-Obfuscation CLIP+ Launcher - PowerShell Module test 2024-04-05
sigma Invoke-Obfuscation VAR++ LAUNCHER OBFUSCATION - PowerShell test 2024-04-05
sigma Invoke-Obfuscation Via Stdin - PowerShell Module test 2024-04-05
sigma Invoke-Obfuscation VAR+ Launcher - PowerShell test 2024-04-05
sigma Invoke-Obfuscation Via Use Clip - PowerShell Module test 2024-04-05
sigma Invoke-Obfuscation STDIN+ Launcher - Powershell test 2024-04-05
sigma Invoke-Obfuscation CLIP+ Launcher - PowerShell test 2024-04-05
sigma Invoke-Obfuscation Via Stdin - Powershell test 2024-04-05
suricata ET INFO PS1 Powershell File Request rev 3 2024-04-04
suricata ET MALWARE CrownAdPro CnC Activity M5 rev 3 2024-04-04
suricata ET MALWARE CrownAdPro CnC Activity M4 rev 3 2024-04-04
suricata ET MALWARE Socelars Stealer CnC Activity rev 3 2024-04-04
suricata ET INFO PSRC Powershell File Request rev 3 2024-04-04
suricata ET CURRENT_EVENTS [Fireeye] Backdoor.HTTP.BEACON.[CSBundle Original Server 2] rev 5 2024-04-04
suricata ET MALWARE Win32/Agent.AAIB Variant CnC rev 4 2024-04-04
suricata ET MALWARE Operation Interception Beacon rev 3 2024-04-04
suricata ET INFO Packity Proxy Connection rev 2 2024-04-04
suricata ET MALWARE Win32/Kryptik.HCZR Variant Initial Checkin rev 2 2024-04-04
suricata ET MALWARE Trojan-Dropper.MSIL CnC Traffic - POST rev 2 2024-04-04
suricata ET INFO PS1XML Powershell File Request rev 3 2024-04-04
suricata ET MALWARE Win32/Colibri Loader Activity M3 rev 3 2024-04-04
suricata ET ADWARE_PUP Nivesro Cheat CnC Activity M1 rev 3 2024-04-04
suricata ET CURRENT_EVENTS [Fireeye] Backdoor.HTTP.BEACON.[CSBundle Original Server 3] rev 5 2024-04-04
suricata ET MALWARE Cobalt Strike Malleable C2 JQuery Custom Profile M5 rev 3 2024-04-04
suricata ET MALWARE Win32/Onliner Requesting Additional Modules rev 3 2024-04-04
suricata ET MALWARE ChaseBot CnC Checkin rev 5 2024-04-04
suricata ET ADWARE_PUP DownLoadAdmin Activity rev 2 2024-04-04
suricata ET ADWARE_PUP Win32/DownloadAssistant.Q Variant Checkin rev 2 2024-04-04
suricata ET MALWARE PurpleFox Backdoor/Rootkit Download Request M1 rev 3 2024-04-04
suricata ET ATTACK_RESPONSE Obfuscated Batch Script Inbound M2 rev 3 2024-04-04
suricata ET MALWARE Win32/LODEINFO v0.3.5 CnC Checkin rev 3 2024-04-04
suricata ET MALWARE Win32/Predator Variant Dropper Activity rev 2 2024-04-04
suricata ET MALWARE Win32/Avaddon Ransomware Style External IP Address Check rev 3 2024-04-04
suricata ET MALWARE LumOffice Checkin rev 3 2024-04-04
suricata ET MALWARE Reimageplus Ransomware Checkin rev 2 2024-04-04
suricata ET MALWARE Win32/Kryptik.HNBU CryptoMiner - GetTasks Request rev 3 2024-04-04
suricata ET MALWARE ELF/RedXOR CnC Checkin rev 2 2024-04-04
suricata ET MALWARE Mimikatz x64 Executable Download Over HTTP rev 3 2024-04-04
suricata ET CURRENT_EVENTS [Fireeye] Backdoor.HTTP.BEACON.[CSBundle MSOffice Server] rev 5 2024-04-04
suricata ET MALWARE Win32/Sarwent Initial Checkin rev 4 2024-04-04