Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Suspected REDCURL CnC Activity M2 rev 4 2024-04-04
suricata ET MALWARE StormKitty Exfil via AnonFiles rev 3 2024-04-04
suricata ET INFO CDXML Powershell File Request rev 3 2024-04-04
suricata ET ADWARE_PUP DownloadAssistant Activity rev 2 2024-04-04
suricata ET MALWARE MSIL/Juliens Botnet CnC Activity M1 rev 2 2024-04-04
suricata ET MALWARE Win32/Injector.ULH CnC Activity rev 3 2024-04-04
suricata ET MALWARE Operation Interception Beacon rev 3 2024-04-04
suricata ET INFO PS1 Powershell File Request rev 3 2024-04-04
suricata ET MALWARE DarkHotel Payload Uploading to CnC rev 4 2024-04-04
suricata ET MALWARE CrownAdPro CnC Activity M4 rev 3 2024-04-04
suricata ET MALWARE Win32/LODEINFO v0.3.6 CnC Checkin rev 3 2024-04-04
suricata ET MALWARE Cobalt Strike Malleable C2 JQuery Custom Profile M5 rev 3 2024-04-04
suricata ET MALWARE Observed AHK Downloader Request Structure rev 3 2024-04-04
suricata ET MALWARE Win32/Onliner Requesting Additional Modules rev 3 2024-04-04
suricata ET MALWARE RCtrl Backdoor CnC Checkin M2 rev 3 2024-04-04
suricata ET MALWARE DCRat Initial CnC Activity rev 3 2024-04-04
suricata ET CURRENT_EVENTS [Fireeye] Backdoor.HTTP.BEACON.[CSBundle Original Server 3] rev 5 2024-04-04
suricata ET INFO Possible Sharepoint Resource Infection rev 2 2024-04-04
suricata ET MALWARE MirrorBlast KiXtart Downloader Client Request M2 rev 3 2024-04-04
suricata ET MALWARE Win32/X-Files Stealer Activity rev 3 2024-04-04
suricata ET MALWARE Possible GhostMiner CCBOT Component - CnC Checkin rev 2 2024-04-04
suricata ET MALWARE ELF/RedXOR CnC Checkin rev 2 2024-04-04
suricata ET MALWARE Project Plague CnC Activity rev 3 2024-04-04
suricata ET ADWARE_PUP Win32/Adware.YoutubeDownloaderGuru.A Variant CnC Activity rev 2 2024-04-04
suricata ET GAMES GameHouse License Check rev 4 2024-04-04
suricata ET MALWARE APT Mustang Panda CnC Activity rev 2 2024-04-04
suricata ET ADWARE_PUP Nivesro Cheat CnC Activity M1 rev 3 2024-04-04
suricata ET MALWARE Win32/IcedID Requesting Encoded Binary M5 rev 4 2024-04-04
suricata ET MALWARE MSIL/Heracles Variant CnC Activity rev 3 2024-04-04
suricata ET INFO PSD1 Powershell File Request rev 3 2024-04-04
suricata ET MALWARE Trojan/MSIL.DOTHETUK CnC Activity rev 3 2024-04-04
suricata ET INFO PS1XML Powershell File Request rev 3 2024-04-04
suricata ET MALWARE ChaseBot CnC Checkin rev 5 2024-04-04
suricata ET EXPLOIT Possible WePresent WIPG1000 File Inclusion rev 5 2024-04-04
suricata ET MALWARE CrownAdPro CnC Activity M2 rev 3 2024-04-04
suricata ET MALWARE Win32/Fujacks Variant CnC Activity rev 2 2024-04-04
suricata ET MALWARE Win32/BlackNET CnC Requesting Command rev 5 2024-04-04
suricata ET ADWARE_PUP DownLoadAdmin Activity rev 2 2024-04-04
suricata ET INFO PSRC Powershell File Request rev 3 2024-04-04
suricata ET CURRENT_EVENTS [Fireeye] Backdoor.HTTP.BEACON.[CSBundle Original Server 2] rev 5 2024-04-04