Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Possible Google Drive Phishing Landing 2015-07-13 rev 4 2024-03-14
suricata ET MALWARE OSX/Mokes.A CnC Heartbeat rev 3 2024-03-14
suricata ET PHISHING Verizon Wireless Phishing Landing 2018-01-30 rev 2 2024-03-14
suricata ET PHISHING PHOEN!X Apple Phish Landing Page 2015-12-29 rev 3 2024-03-14
suricata ET PHISHING Dropbox Phishing Landing 2018-02-14 rev 2 2024-03-14
suricata ET EXPLOIT Shenzhen TVT DVR/NVR/IPC ConfigSyncProc RCE Attempt rev 2 2024-03-14
suricata ET EXPLOIT_KIT Cool Exploit Kit Plugin-Detect July 08 2013 rev 4 2024-03-14
suricata ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1 rev 4 2024-03-14
suricata ET EXPLOIT_KIT Disdain EK Flash Exploit M3 Aug 23 2017 rev 3 2024-03-14
suricata ET PHISHING Bank of America Phishing Landing 2018-08-30 rev 2 2024-03-14
suricata ET PHISHING Successful Survey Credential Phish 2015-08-12 rev 5 2024-03-14
suricata ET EXPLOIT_KIT Unknown EK Landing Feb 16 2015 b64 2 M1 rev 3 2024-03-14
suricata ET PHISHING Successful DHL Phish 2015-09-14 rev 5 2024-03-14
suricata ET EXPLOIT_KIT SUSPICIOUS Grey Advertising Often Leading to EK rev 4 2024-03-14
suricata GPL NETBIOS DCERPC msqueue bind attempt rev 6 2024-03-14
suricata ET PHISHING Possible Google Docs Phishing Landing - Title over non SSL rev 2 2024-03-14
suricata ET PHISHING Successful Generic Adobe Phish 2019-07-29 rev 2 2024-03-14
suricata ET PHISHING Turbotax Phishing Landing 2018-01-30 rev 2 2024-03-14
suricata ET MALWARE Parallax CnC Response Activity M16 rev 3 2024-03-14
suricata ET PHISHING Wells Fargo Phishing Landing 2018-02-02 M5 rev 2 2024-03-14
suricata ET PHISHING Microsoft Onedrive Phishing Landing 2018-01-29 rev 2 2024-03-14
suricata ET MALWARE Linux/Moose NAT Traversal CnC Beacon - Multiple Tunnel rev 4 2024-03-14
suricata ET MALWARE PawnStorm Java Class Stage 2 M1 Aug 28 2015 rev 3 2024-03-14
suricata ET MALWARE Mystic Stealer C2 Client Hello Packet rev 4 2024-03-14
suricata ET EXPLOIT_KIT SofosFO obfuscator string 19 Dec 12 - possible landing rev 7 2024-03-14
suricata ET WEB_CLIENT Possible CVE-2014-4113 Exploit Download with Hurricane Panda IOC rev 4 2024-03-14
suricata ET EXPLOIT_KIT SNET EK Encoded VBS 1 rev 4 2024-03-14
suricata GPL NETBIOS SMB-DS nddeapi bind attempt rev 7 2024-03-14
suricata ET PHISHING DHL Phishing Landing 2016-07-11 rev 4 2024-03-14
suricata ET EXPLOIT Possible MeltDown PoC Download In Progress rev 3 2024-03-14
suricata ET PHISHING Possible AOL Mail Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET EXPLOIT_KIT Unknown EK Secondary Landing Page May 01 2015 M2 rev 3 2024-03-14
suricata GPL NETBIOS SMB winreg little endian bind attempt rev 5 2024-03-14
suricata ET PHISHING Linkedin Phishing Landing 2018-08-30 rev 2 2024-03-14
suricata ET MALWARE Pony DLL Download M2 rev 3 2024-03-14
suricata ET MALWARE Parallax CnC Response Activity M8 rev 2 2024-03-14
suricata ET EXPLOIT_KIT Terror EK CVE-2016-0189 Exploit rev 4 2024-03-14
suricata ET EXPLOIT_KIT KaiXin Secondary Landing Page M2 rev 4 2024-03-14
suricata ET PHISHING Possible Capitech Internet Banking Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET PHISHING Apple ID Phishing Landing 2015-08-19 rev 4 2024-03-14