Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET EXPLOIT Possible SAP NetWeaver CVE-2020-6287 Vulnerable Response rev 3 2024-03-14
suricata ET INFO Cisco Data Center Network Manager - Vulnerable Version Detected 10.4 rev 3 2024-03-14
suricata ET PHISHING Possible DHL Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET EXPLOIT Possible Spectre PoC Download In Progress rev 3 2024-03-14
suricata ET EXPLOIT_KIT Double-Encoded Reverse Base64/Dean Edwards Packed JavaScript Observed in Unknown EK Feb 16 2015 b64 1 M2 rev 4 2024-03-14
suricata ET PHISHING Wells Fargo Phishing Landing 2018-02-09 rev 2 2024-03-14
suricata ET PHISHING Chase Phishing Landing 2018-01-18 rev 2 2024-03-14
suricata ET EXPLOIT_KIT Evil Redirector Leading to EK Jul 12 2016 rev 5 2024-03-14
suricata ET PHISHING Mailbox Upgrade Phishing Landing 2018-02-05 rev 3 2024-03-14
suricata ET MALWARE HTTPCore CnC Tasking File rev 3 2024-03-14
suricata ET MALWARE Possible AMSI Powershell Bypass Attempt rev 3 2024-03-14
suricata ET EXPLOIT CVE-2016-3210 Exploit Observed ITW M1 Nov 30 rev 3 2024-03-14
suricata ET PHISHING Bank of America Phishing Landing 2018-01-30 rev 2 2024-03-14
suricata ET PHISHING Axie Infinity Credential Phish Landing Page M2 2022-05-18 rev 3 2024-03-14
suricata ET MALWARE [ANY.RUN] Gh0stBins Checkin rev 2 2024-03-14
suricata ET PHISHING Google Drive Phishing Landing 2018-02-07 rev 2 2024-03-14
suricata ET MALWARE Win32/NetDooka Framework RAT Sending File rev 6 2024-03-14
suricata ET PHISHING USAA Phishing Landing 2018-02-20 rev 3 2024-03-14
suricata ET PHISHING Paypal Phishing Landing 2018-01-31 rev 2 2024-03-14
suricata ET PHISHING Hellion Postmaster Phishing Landing 2018-08-30 rev 2 2024-03-14
suricata ET INFO Vulnerable Java Version 14.0.x Detected rev 4 2024-03-14
suricata ET PHISHING Google Drive Phishing Landing 2015-07-28 rev 4 2024-03-14
suricata GPL NETBIOS SMB-DS llsrpc bind attempt rev 5 2024-03-14
suricata ET INFO LDAPSv3 LDAPS_START_TLS Request Outbound rev 3 2024-03-14
suricata ET PHISHING Wells Fargo Phishing Landing 2018-02-22 rev 3 2024-03-14
suricata GPL NETBIOS SMB nddeapi unicode create tree attempt rev 6 2024-03-14
suricata GPL EXPLOIT login buffer non-evasive overflow attempt rev 6 2024-03-14
suricata ET WEB_CLIENT Fake AV Phone Scam Landing June 16 2015 M4 rev 4 2024-03-14
suricata ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2024-03-14
suricata ET PHISHING Paypal Phishing Landing 2018-05-09 rev 2 2024-03-14
suricata ET MALWARE Drovorub monitor Module Server Response rev 3 2024-03-14
suricata ET MALWARE Sourtoff Download Simda Request rev 4 2024-03-14
suricata ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2024-03-14
suricata ET MALWARE Drovorub tunnel Module Server Response rev 3 2024-03-14
suricata ET EXPLOIT Xiongmai/HiSilicon DVR - OpenTelnet Inbound - Possilbe CVE-2020-22253 Attempt rev 2 2024-03-14
suricata ET INFO I2P Seeds File Download rev 3 2024-03-14
suricata ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3 rev 4 2024-03-14
suricata ET MALWARE [ANY.RUN] Possible Gh0stRat Checkin rev 2 2024-03-14
suricata ET EXPLOIT_KIT DNSChanger EK Secondary Landing May 12 2015 M2 rev 3 2024-03-14
suricata ET EXPLOIT_KIT Document.write Long Backslash UTF-16 Encoded Content - Exploit Kit Behavior Flowbit Set rev 7 2024-03-14