Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET INFO 404 Response with Javascript Variable in Page rev 2 2024-04-03
suricata ET MALWARE Fodcha Botnet Style DNS Server Lookup rev 3 2024-04-03
suricata ET HUNTING Terse Request to note .youdao .com - Possible Download rev 4 2024-04-03
suricata ET MALWARE Trojan-PSW.Win32.Stealer.sb CnC rev 3 2024-04-03
suricata ET MALWARE CargoBay CnC Activity rev 3 2024-04-03
suricata ET CURRENT_EVENTS Possible Crypto Drainer Enumerate rev 3 2024-04-03
suricata ET MALWARE Arkei/Vidar/Mars Stealer Variant rev 4 2024-04-03
suricata ET MALWARE Win32/TrojanDropper.Agent.SSQ Checkin rev 2 2024-04-03
suricata ET MALWARE Win32/VB.QPK CnC Checkin rev 2 2024-04-03
suricata ET MALWARE StormKitty Download Request With Minimal Headers rev 3 2024-04-03
suricata ET MALWARE SnappyTCP Reverse Shell Client Checkin M1 rev 3 2024-04-03
suricata ET ADWARE_PUP Win32/ReImageRepair.T CnC Activity rev 3 2024-04-03
suricata ET MALWARE Win32.Agent.Y!c CnC Checkin rev 2 2024-04-03
suricata ET EXPLOIT_KIT Balada JavaScript Inject rev 2 2024-04-03
suricata ET CURRENT_EVENTS Possible Crypto Drainer Fetch rev 3 2024-04-03
suricata ET MALWARE Antinum WebSockets Start rev 3 2024-04-03
suricata GPL ATTACK_RESPONSE id check returned apache rev 9 2024-04-03
suricata ET MALWARE Win32/frebniis IIS Backdoor Trigger Attempt M2 rev 2 2024-04-03
suricata ET MALWARE Possible OSX/SHLAYER Checkin M2 rev 3 2024-04-03
suricata ET MALWARE Bandit Stealer Config Inbound rev 2 2024-04-03
suricata ET MALWARE Cobalt Strike Malleable C2 JQuery Custom Profile M6 rev 3 2024-04-03
suricata ET MALWARE Maldoc CnC Checkin rev 2 2024-04-03
suricata GPL ATTACK_RESPONSE index of /cgi-bin/ response rev 9 2024-04-03
suricata ET MALWARE Xehook Stealer CnC Checkin rev 3 2024-04-03
suricata GPL INFO Linksys router default password login attempt rev 12 2024-04-03
suricata GPL ATTACK_RESPONSE command error rev 11 2024-04-03
suricata ET ADWARE_PUP pdfspeedup Initial CnC Checkin rev 2 2024-04-03
suricata ET MALWARE Win32/Backdoor.Daxin CnC Activity rev 3 2024-04-03
suricata GPL INFO Linksys router default username and password login attempt rev 15 2024-04-03
suricata ET MALWARE [ANY.RUN] Konni.APT Exfiltration rev 3 2024-04-03
suricata ET MALWARE MegalodonHTTP/LuciferHTTP/Gomorrah Client Action M2 rev 3 2024-04-03
suricata ET MALWARE Win32/Meimaii Checkin rev 2 2024-04-03
suricata ET EXPLOIT_KIT Parrot TDS Malicious Response rev 3 2024-04-03
suricata ET MALWARE Ducktail APT Style Payload Request rev 3 2024-04-03
suricata ET MALWARE Win32/Small.NMZ CnC Checkin rev 2 2024-04-03
suricata ET MALWARE Win32/MSIL.Heracles Checkin rev 3 2024-04-03
suricata ET MALWARE Win32/Uwamson.A!ml CnC Checkin rev 2 2024-04-03
suricata ET MALWARE Xehook Stealer Data Exfiltration Attempt rev 2 2024-04-03
suricata ET MALWARE Win32/Wacapew CnC Checkin rev 3 2024-04-03
suricata ET MALWARE Antinum HTTP Checkin rev 3 2024-04-03