Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE NanoCore RAT Keepalive Response 1 rev 11 2024-03-14
suricata GPL NETBIOS SMB-DS IActivation unicode bind attempt rev 5 2024-03-14
suricata GPL NETBIOS DCERPC LSASS direct bind attempt rev 10 2024-03-14
suricata ET PHISHING Google Drive Phishing Landing 2015-07-28 rev 4 2024-03-14
suricata ET PHISHING Successful Adobe Phish M3 2016-07-11 rev 4 2024-03-14
suricata ET PHISHING Successful Generic .EDU Phish Aug 17 2017 rev 7 2024-03-14
suricata ET EXPLOIT Possible SAP NetWeaver CVE-2020-6287 Exploit Success rev 3 2024-03-14
suricata ET PHISHING Ourtime Phishing Landing 2018-03-12 rev 3 2024-03-14
suricata ET PHISHING Hellion Postmaster Phishing Landing 2018-08-30 rev 2 2024-03-14
suricata ET MALWARE [ANY.RUN] Gh0stBins Checkin rev 2 2024-03-14
suricata ET PHISHING PDF Cloud Phishing Landing 2018-04-19 rev 2 2024-03-14
suricata ET PHISHING Successful Commonwealth Bank Phish Fake Error Page 2015-08-20 rev 5 2024-03-14
suricata ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 rev 4 2024-03-14
suricata ET WEB_CLIENT PDF With Hidden Embedded File rev 3 2024-03-14
suricata ET EXPLOIT_KIT ScanBox Jun 06 2015 M3 T1 rev 4 2024-03-14
suricata ET EXPLOIT_KIT Evil Redirector Leading to EK Jul 12 2016 rev 5 2024-03-14
suricata ET EXPLOIT_KIT Sweet Orange Landing with Applet Oct 4 2013 rev 8 2024-03-14
suricata ET MALWARE PE EXE or DLL Windows file download Text M2 rev 3 2024-03-14
suricata ET MOBILE_MALWARE Possible Android CVE-2014-6041 rev 5 2024-03-14
suricata ET PHISHING USAA Phishing Landing 2018-02-20 rev 3 2024-03-14
suricata ET WEB_CLIENT Fake Flash Update Mar 23 rev 4 2024-03-14
suricata ET EXPLOIT_KIT DNSChanger EK Secondary Landing May 12 2015 M2 rev 3 2024-03-14
suricata ET MALWARE SharpNoPSExec EXE Lateral Movement Tool Downloaded rev 3 2024-03-14
suricata ET EXPLOIT Possible SAP NetWeaver CVE-2020-6287 Vulnerable Response rev 3 2024-03-14
suricata ET WEB_CLIENT Microsoft Tech Support Phone Scam Landing 2018-09-12 rev 3 2024-03-14
suricata GPL NETBIOS SMB nddeapi unicode create tree attempt rev 6 2024-03-14
suricata ET MALWARE NanoCore RAT Keepalive 1 rev 3 2024-03-14
suricata ET PHISHING Successful Generic Credential Phish - Loading Messages 2015-08-12 rev 6 2024-03-14
suricata ET PHISHING Anonisma Paypal Phishing Loading Page 2015-12-29 rev 3 2024-03-14
suricata ET PHISHING Facebook Phishing Landing 2018-02-15 rev 2 2024-03-14
suricata ET MALWARE Netwire RAT Check-in rev 7 2024-03-14
suricata ET PHISHING Sparkasse Phishing Landing 2018-02-15 rev 2 2024-03-14
suricata ET CHAT IRC USER command rev 18 2024-03-14
suricata GPL NETBIOS SMB winreg unicode little endian bind attempt rev 5 2024-03-14
suricata ET WEB_CLIENT Google Chrome Pdfium JPEG2000 Heap Overflow rev 3 2024-03-14
suricata ET EXPLOIT_KIT Document.write Long Backslash UTF-16 Encoded Content - Exploit Kit Behavior Flowbit Set rev 7 2024-03-14
suricata ET PHISHING Generic PhishKit Author Comment M10 2018-08-30 rev 2 2024-03-14
suricata ET PHISHING ASB Bank Phishing Landing 2018-02-09 M2 rev 2 2024-03-14
suricata ET EXPLOIT_KIT ScanBox Jun 06 2015 M2 T1 rev 4 2024-03-14
suricata ET EXPLOIT F5 BIG-IP rsync cmi authorized_keys successful exfiltration rev 6 2024-03-14