Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET CHAT GaduGadu Chat Receive Message rev 6 2024-03-15
suricata ET CHAT GaduGadu Chat Server Login Failed Packet rev 6 2024-03-15
suricata ET INFO Executable Retrieved With Minimal HTTP Headers - Potential Second Stage Download rev 6 2024-03-15
sigma Uncommon Outbound Kerberos Connection - Security test 2024-03-15
sigma Uncommon Outbound Kerberos Connection test 2024-03-15
snort ET TROJAN NewBot Loader CnC Checkin rev 1 2024-03-14
suricata ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2 rev 4 2024-03-14
suricata ET PHISHING IRS Phishing Landing 2018-05-07 rev 2 2024-03-14
suricata ET EXPLOIT_KIT KaiXin Landing M4 rev 5 2024-03-14
suricata ET PHISHING Apple Account Phishing Landing 2015-11-18 rev 5 2024-03-14
suricata ET MALWARE Possible AMSI Powershell Bypass Attempt B643 rev 3 2024-03-14
suricata ET PHISHING cPanel Phishing Landing 2015-12-01 rev 3 2024-03-14
suricata ET EXPLOIT_KIT RedKit applet + obfuscated URL Apr 7 2013 rev 4 2024-03-14
suricata ET CHAT IRC USER Likely bot with 0 0 colon checkin rev 3 2024-03-14
suricata ET PHISHING Dropbox Shared Document Phishing Landing Feb 21 2017 rev 3 2024-03-14
suricata ET INFO Vulnerable Java Version 12.0.x Detected rev 5 2024-03-14
suricata ET WEB_CLIENT Tech Support Phone Scam Landing 2017-07-26 rev 3 2024-03-14
suricata ET PHISHING Facebook Upgrade Payment Phishing Landing 2018-02-05 rev 2 2024-03-14
suricata ET PHISHING Possible Adobe PDF Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET PHISHING OneDrive Phishing Landing 2018-04-09 rev 2 2024-03-14
suricata ET PHISHING Successful Bank of America Phish 2015-10-02 rev 3 2024-03-14
suricata GPL NETBIOS SMB-DS msqueue unicode little endian bind attempt rev 5 2024-03-14
suricata ET PHISHING Dropbox Phishing Landing 2018-02-15 rev 2 2024-03-14
suricata ET PHISHING Bank of America Phishing Landing 2018-01-18 M1 rev 2 2024-03-14
suricata ET PHISHING Successful WZ-REKLAMA Phish 2016-01-08 rev 4 2024-03-14
suricata ET PHISHING Smartermail Phishing Landing 2018-02-20 rev 2 2024-03-14
suricata ET EXPLOIT Shenzhen TVT DVR/NVR/IPC Hardcoded Credential ConfigSyncProc System Details Request rev 2 2024-03-14
suricata ET MALWARE Mimikatz x64 Mimidrv.sys Download Over HTTP rev 4 2024-03-14
suricata ET PHISHING Google Drive Phishing Landing Nov 6 2015 M2 rev 5 2024-03-14
suricata ET PHISHING Facebook Phishing Landing 2018-01-23 rev 2 2024-03-14
suricata ET MALWARE VirRansom/VirLock Checkin Response rev 4 2024-03-14
suricata ET PHISHING Generic Smail Phishing Landing 2018-01-29 rev 2 2024-03-14
suricata ET PHISHING [eSentire] Docusign Phishing Landing 2018-04-09 rev 4 2024-03-14
suricata ET PHISHING Bank of America Phishing Landing 2018-05-01 rev 2 2024-03-14
suricata ET EXPLOIT GoCD Authentication Bypass Successful Leak rev 3 2024-03-14
suricata ET MALWARE Possible SharpShooter Framework Generated Script rev 2 2024-03-14
suricata ET EXPLOIT Possible Android Stagefright MP4 CVE-2015-1538 - ROP rev 3 2024-03-14
suricata ET MALWARE Possible click2play bypass Oct 19 2015 as observed in PawnStorm rev 5 2024-03-14
suricata ET HUNTING Generic CollectGarbage in Hex rev 7 2024-03-14
suricata GPL NETBIOS SMB-DS llsrpc unicode bind attempt rev 5 2024-03-14