Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET EXPLOIT_KIT Terror EK Payload Download M2 Mar 14 2017 rev 2 2024-03-14
suricata ET PHISHING Generic Mailbox Phishing Landing 2018-08-30 rev 2 2024-03-14
suricata ET CHAT GaduGadu Chat Client Login Packet rev 5 2024-03-14
suricata ET EXPLOIT Possible Firefox PDF.js Same-Origin-Bypass CVE-2015-4495 M2 rev 3 2024-03-14
suricata ET MALWARE Drovorub shell Module Server Response rev 3 2024-03-14
suricata ET MALWARE Drovorub file Module Server Response rev 3 2024-03-14
suricata ET MALWARE Possible malicious Office doc hidden in XML file rev 3 2024-03-14
suricata ET HUNTING PNG image exfiltration over raw TCP rev 4 2024-03-14
suricata ET PHISHING Possible Desjardins Phishing Landing - Title over non SSL rev 2 2024-03-14
suricata ET EXPLOIT Intex Router N-150 Cross-Site Request Forgery rev 2 2024-03-14
suricata ET EXPLOIT_KIT Disdain EK Flash Exploit M2 Aug 23 2017 rev 3 2024-03-14
suricata ET INFO Vulnerable Java Version 1.4.x Detected rev 16 2024-03-14
suricata ET WEB_CLIENT WSO 2.6 Webshell Accessed on External Compromised Server rev 2 2024-03-14
suricata ET MALWARE NanoCore RAT Keepalive Response 2 rev 11 2024-03-14
suricata ET PHISHING Generic PhishKit Author Comment M9 2018-08-30 rev 2 2024-03-14
suricata GPL NETBIOS SMB winreg bind attempt rev 5 2024-03-14
suricata ET EXPLOIT Possible SAP NetWeaver CVE-2020-6287 Exploit Success rev 3 2024-03-14
suricata ET PHISHING Possible Successful Apple Phish 2015-07-27 rev 4 2024-03-14
suricata ET PHISHING Google Drive Phishing Landing 2018-02-07 rev 2 2024-03-14
suricata ET PHISHING Comcast/Xfinity Phishing Landing 2018-04-19 rev 3 2024-03-14
suricata ET PHISHING Paypal Phishing Landing 2018-05-02 rev 2 2024-03-14
suricata ET EXPLOIT_KIT ScanBox Jun 06 2015 M2 T1 rev 4 2024-03-14
suricata ET PHISHING Paypal Phishing Landing 2017-12-26 rev 2 2024-03-14
suricata ET PHISHING Generic PhishKit Author Comment M6 2018-08-30 rev 2 2024-03-14
suricata ET MALWARE [CrowdStrike] ANCHOR PANDA Torn RAT Beacon Message rev 4 2024-03-14
suricata ET INFO Possible SSLv2 Negotiation in Progress Server Hello rev 3 2024-03-14
suricata ET EXPLOIT F5 BIG-IP rsync cmi authorized_keys successful exfiltration rev 6 2024-03-14
suricata GPL NETBIOS SMB-DS IActivation unicode little endian bind attempt rev 5 2024-03-14
suricata ET PHISHING Generic XBALTI Phishing Landing rev 2 2024-03-14
suricata ET WEB_CLIENT PWNJS JS Constructs rev 2 2024-03-14
suricata GPL NETBIOS SMB llsrpc bind attempt rev 6 2024-03-14
suricata ET PHISHING Github Phishing Landing 2018-07-19 rev 2 2024-03-14
suricata ET EXPLOIT_KIT Sakura Landing with Applet Aug 30 2013 rev 4 2024-03-14
suricata ET EXPLOIT_KIT KaiXin Landing M3 rev 4 2024-03-14
suricata ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3 rev 4 2024-03-14
suricata ET PHISHING TSB Bank / Lloyds Bank Phishing Landing 2018-02-01 rev 2 2024-03-14
suricata ET PHISHING Anonisma AES Crypto Observed in Javascript - Possible Phishing Landing 2015-12-29 rev 4 2024-03-14
suricata ET MALWARE Magniber Ransomware Retrieving Instructions rev 2 2024-03-14
suricata GPL NETBIOS SMB-DS nddeapi create tree attempt rev 6 2024-03-14
suricata ET PHISHING Netflix Phishing Landing 2018-05-02 rev 3 2024-03-14