Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata GPL CHAT Google Talk Startup rev 4 2024-03-17
suricata ET P2P Soulseek rev 10 2024-03-17
suricata ET CHAT IRC authorization message rev 6 2024-03-17
suricata ET HUNTING Suspicious Windows NT version 3 User-Agent rev 8 2024-03-17
suricata ET ATTACK_RESPONSE FTP inaccessible directory access LPT1 rev 9 2024-03-17
suricata ET GAMES Blizzard Web Downloader Install Detected rev 5 2024-03-17
suricata ET SCAN Nessus User Agent rev 12 2024-03-17
suricata ET ADWARE_PUP SurfSidekick Activity rev 11 2024-03-17
suricata ET INFO Cisco Device New Config Built rev 10 2024-03-17
suricata ET ADWARE_PUP SurfSidekick Download rev 10 2024-03-17
suricata ET MALWARE IMDDOS Botnet User-Agent i am ddos rev 6 2024-03-17
suricata ET ATTACK_RESPONSE FTP inaccessible directory access LPT4 rev 9 2024-03-17
suricata ET EXPLOIT libPNG - Possible integer overflow in allocation in png_handle_sPLT rev 10 2024-03-17
suricata GPL CHAT Google Talk Version Check rev 6 2024-03-17
suricata ET P2P Gnutella TCP Ultrapeer Traffic rev 7 2024-03-17
suricata ET P2P Gnutella Connect rev 8 2024-03-17
suricata ET MALWARE [PTsecurity] MZRevenge Ransomware Server Response rev 3 2024-03-17
suricata ET ATTACK_RESPONSE FTP inaccessible directory access COM2 rev 9 2024-03-17
suricata ET P2P BitTorrent Traffic rev 10 2024-03-17
suricata ET SCAN Acunetix scan in progress acunetix variable in http_uri rev 8 2024-03-17
suricata ET P2P Phatbot Control Connection rev 7 2024-03-17
suricata ET ATTACK_RESPONSE FTP inaccessible directory access COM3 rev 9 2024-03-17
suricata ET ATTACK_RESPONSE FTP inaccessible directory access LPT2 rev 9 2024-03-17
suricata ET ADWARE_PUP Adware pricepeep Adware.Shopper.297 rev 5 2024-03-17
suricata ET ATTACK_RESPONSE FTP inaccessible directory access COM1 rev 9 2024-03-17
suricata ET CHAT ICQ Message rev 6 2024-03-17
suricata ET INFO Cisco Device in Config Mode rev 10 2024-03-17
suricata ET MALWARE IMDDOS Botnet User-Agent kav rev 8 2024-03-17
suricata ET HUNTING Suspicious Windows NT version 1 User-Agent rev 7 2024-03-17
suricata ET SCAN Medusa User-Agent rev 5 2024-03-17
suricata ET ATTACK_RESPONSE FTP inaccessible directory access NULL rev 9 2024-03-17
suricata ET P2P LimeWire P2P Traffic rev 5 2024-03-17
suricata ET SCAN Acunetix scan in progress acunetix_wvs_security_test in http_uri rev 8 2024-03-17
suricata ET ATTACK_RESPONSE FTP inaccessible directory access AUX rev 9 2024-03-17
snort ET WEB_SPECIFIC_APPS Ruijie Network Switches Unauthenticated Command Execution rev 1 2024-03-15
suricata ET MALWARE 404 Response with an EXE Attached - Likely Malware Drop rev 15 2024-03-15
suricata ET ADWARE_PUP CoinSurf Proxy CnC Response rev 2 2024-03-15
suricata ET MALWARE [CrowdStrike] ANCHOR PANDA Torn RAT Beacon Message Header Local rev 4 2024-03-15
suricata ET INFO Executable Retrieved With Minimal HTTP Headers - Potential Second Stage Download rev 6 2024-03-15
suricata ET CHAT GaduGadu Chat Server Login OK Packet rev 7 2024-03-15