Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata GPL NETBIOS SMB winreg unicode bind attempt rev 6 2024-03-14
suricata ET PHISHING Possible Free Mobile Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET PHISHING Successful Outlook Webmail Account Phish 2015-09-02 rev 4 2024-03-14
suricata ET PHISHING Bank of America Phishing Landing 2018-08-30 rev 2 2024-03-14
suricata ET INFO Possible SSLv2 Negotiation in Progress Client Master Key SSL2_RC4_128_WITH_MD5 rev 3 2024-03-14
suricata ET WEB_SERVER Generic WSO Webshell Password Prompt Accessed on Internal Compromised Server rev 3 2024-03-14
suricata ET PHISHING Wells Fargo Phishing Landing 2018-02-02 M7 rev 2 2024-03-14
suricata GPL NETBIOS SMB llsrpc unicode bind attempt rev 5 2024-03-14
suricata ET PHISHING Smartsheet Phishing Landing 2018-01-29 rev 3 2024-03-14
suricata ET EXPLOIT_KIT RedKit applet + obfuscated URL Apr 7 2013 rev 4 2024-03-14
suricata GPL NETBIOS SMB-DS DCERPC ISystemActivator bind attempt rev 14 2024-03-14
suricata GPL NETBIOS SMB msqueue bind attempt rev 5 2024-03-14
suricata ET INFO Vulnerable Java Version 1.5.x Detected rev 15 2024-03-14
suricata ET INFO Cisco Data Center Network Manager - Vulnerable Version Detected 11.1 rev 3 2024-03-14
suricata ET MALWARE RAMNIT.A M1 rev 3 2024-03-14
suricata ET EXPLOIT_KIT Disdain EK Flash Exploit M1 Aug 23 2017 rev 3 2024-03-14
suricata ET MALWARE Possible AMSI Powershell Bypass Attempt B641 rev 3 2024-03-14
suricata GPL NETBIOS SMB ISystemActivator unicode little endian bind attempt rev 5 2024-03-14
suricata ET PHISHING Wells Fargo Phishing Landing 2018-02-13 rev 2 2024-03-14
suricata ET PHISHING Generic MRxJoker Phishing Landing 2018-09-27 rev 2 2024-03-14
suricata ET MALWARE Win32/NetDooka Framework RAT Sending Session ID rev 4 2024-03-14
suricata ET PHISHING Possible Fedex Phishing Landing 2015-07-28 rev 5 2024-03-14
suricata ET PHISHING Possible Successful Apple Phish 2015-07-27 rev 4 2024-03-14
suricata ET WEB_SERVER ATTACKER WebShell - 1337w0rm - Landing Page rev 4 2024-03-14
suricata ET WEB_CLIENT DRIVEBY EXE Embeded in Page Likely Evil M1 rev 3 2024-03-14
suricata ET MALWARE Win32/Ropest.H CnC - INBOUND set rev 3 2024-03-14
suricata GPL NETBIOS SMB-DS winreg little endian bind attempt rev 5 2024-03-14
suricata ET EXPLOIT_KIT Likely Evil JS used in Unknown EK Landing rev 5 2024-03-14
suricata ET EXPLOIT CVE-2017-0199 Common Obfus Stage 2 DL rev 3 2024-03-14
suricata GPL NETBIOS SMB llsrpc little endian bind attempt rev 5 2024-03-14
suricata ET PHISHING Square Phishing Landing 2018-02-15 rev 2 2024-03-14
suricata ET HUNTING Generic CollectGarbage in Hex rev 7 2024-03-14
suricata ET PHISHING Bank of America Phishing Landing 2018-05-01 rev 2 2024-03-14
suricata ET MALWARE VirRansom/VirLock Checkin Response rev 4 2024-03-14
suricata ET PHISHING Facebook Phishing Landing 2018-01-23 rev 2 2024-03-14
suricata ET PHISHING Google Drive Phishing Landing Nov 6 2015 M2 rev 5 2024-03-14
suricata ET EXPLOIT Shenzhen TVT DVR/NVR/IPC Hardcoded Credential ConfigSyncProc System Details Request rev 2 2024-03-14
suricata ET PHISHING Smartermail Phishing Landing 2018-02-20 rev 2 2024-03-14
suricata ET PHISHING Successful WZ-REKLAMA Phish 2016-01-08 rev 4 2024-03-14
suricata ET PHISHING Dropbox Phishing Landing 2018-02-15 rev 2 2024-03-14