Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_CLIENT Microsoft Tech Support Phone Scam Landing 2018-09-12 rev 3 2024-03-14
suricata ET PHISHING Paypal Phishing Landing 2018-01-29 rev 2 2024-03-14
suricata ET WEB_CLIENT DRIVEBY GENERIC ShellExecute in Hex No Seps rev 3 2024-03-14
suricata ET MALWARE SharpNoPSExec EXE Lateral Movement Tool Downloaded rev 3 2024-03-14
suricata GPL NETBIOS SMB-DS ISystemActivator little endian bind attempt rev 5 2024-03-14
suricata ET INFO SMB Executable File Transfer rev 3 2024-03-14
suricata ET INFO Office Document Download Containing AutoOpen Macro rev 5 2024-03-14
suricata ET PHISHING Sparkasse Phishing Landing 2018-02-15 rev 2 2024-03-14
suricata GPL NETBIOS SMB-DS DCEPRC ORPCThis request flood attempt rev 11 2024-03-14
suricata ET MALWARE Drovorub cloud.auth Module Server Response rev 2 2024-03-14
suricata ET MALWARE PE EXE or DLL Windows file download Text M2 rev 3 2024-03-14
suricata ET EXPLOIT Possible SAP NetWeaver CVE-2020-6287 Vulnerable Response rev 3 2024-03-14
suricata ET PHISHING Yahoo Account Phish Landing 2015-10-23 rev 4 2024-03-14
suricata ET INFO Cisco Data Center Network Manager - Vulnerable Version Detected 10.4 rev 3 2024-03-14
suricata ET MALWARE Possible SharpShooter Framework Generated VBS Script rev 2 2024-03-14
suricata ET PHISHING Microsoft Edge SmartScreen Page Spoof Attempt Dec 16 2016 rev 3 2024-03-14
suricata ET PHISHING Dropbox 000webhost Phishing Landing 2018-04-19 rev 2 2024-03-14
suricata ET PHISHING Upgrade Email Account Phishing Landing 2018-03-12 rev 2 2024-03-14
suricata ET EXPLOIT_KIT Spelevo EK Landing M2 rev 2 2024-03-14
suricata ET WEB_CLIENT Evil JavaScript Injection Sep 29 2015 rev 3 2024-03-14
suricata ET PHISHING Paypal Phishing Landing 2018-01-18 M2 rev 2 2024-03-14
suricata ET PHISHING Dropbox Phishing Landing 2018-08-30 rev 2 2024-03-14
suricata ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3 rev 4 2024-03-14
suricata ET PHISHING Generic Multi-Email Phishing Landing 2018-01-25 rev 2 2024-03-14
suricata ET WEB_CLIENT Malicious SCF File Inbound rev 4 2024-03-14
suricata ET MALWARE Possibly Malicious Base64 Unicode WebClient DownloadString M1 rev 4 2024-03-14
suricata ET EXPLOIT Possible ETERNALROMANCE MS17-010 rev 3 2024-03-14
suricata ET WEB_CLIENT Fake Flash Update Mar 23 rev 4 2024-03-14
suricata GPL NETBIOS SMB-DS DCERPC LSASS unicode bind attempt rev 10 2024-03-14
suricata ET PHISHING Possible Facebook Help Center Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET PHISHING Successful Fake Webmail Quota Phish 2015-09-10 rev 5 2024-03-14
suricata ET EXPLOIT_KIT SunDown EK RIP Landing M1 B643 rev 3 2024-03-14
suricata ET PHISHING Generic PhishKit Author Comment M4 2018-08-30 rev 2 2024-03-14
suricata ET PHISHING Successful Generic .EDU Phish Aug 17 2017 rev 7 2024-03-14
suricata ET EXPLOIT_KIT SunDown EK RIP Landing M1 B642 rev 3 2024-03-14
suricata ET PHISHING PDF Cloud Phishing Landing 2018-04-19 rev 2 2024-03-14
suricata ET WEB_CLIENT PDF With Hidden Embedded File rev 3 2024-03-14
suricata ET PHISHING Possible Raiffeisen Bank Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET CHAT IRC USER command rev 18 2024-03-14
suricata ET PHISHING Email Account Exceeded Quota Phishing Landing 2016-07-11 rev 3 2024-03-14