Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Wells Fargo Phishing Landing 2018-02-22 rev 3 2024-03-14
suricata ET EXPLOIT Possible ETERNALBLUE MS17-010 Echo Response rev 4 2024-03-14
suricata ET PHISHING Generic XBALTI Phishing Landing rev 2 2024-03-14
suricata ET MALWARE Possible Veil Powershell Encoder B642 rev 3 2024-03-14
suricata ET PHISHING Paypal Phishing Landing 2017-12-26 rev 2 2024-03-14
suricata ET MALWARE Likely Malicious Windows SCT Download MSXMLHTTP AX rev 3 2024-03-14
suricata ET PHISHING Yahoo Account Phish Landing 2015-10-23 rev 4 2024-03-14
suricata ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M2 rev 4 2024-03-14
suricata ET EXPLOIT Possible Metasploit Java Exploit rev 8 2024-03-14
suricata ET PHISHING Mailbox Upgrade Phishing Landing 2018-02-05 rev 3 2024-03-14
suricata ET MALWARE Grandoreiro Downloader Activity rev 2 2024-03-14
suricata ET EXPLOIT Possible SAP NetWeaver CVE-2020-6287 Exploit Success rev 3 2024-03-14
suricata ET INFO Vulnerable Java Version 18.0.x Detected rev 3 2024-03-14
suricata GPL NETBIOS SMB-DS nddeapi create tree attempt rev 6 2024-03-14
suricata ET MALWARE [ANY.RUN] Possible Gh0stRat Checkin rev 2 2024-03-14
suricata ET PHISHING AT&T Phishing Landing 2018-01-23 rev 3 2024-03-14
suricata ET PHISHING Anonisma Paypal Phishing Loading Page 2015-12-29 rev 3 2024-03-14
suricata ET PHISHING Centurylink Phishing Landing 2018-04-19 rev 2 2024-03-14
suricata ET EXPLOIT QNAP Shellshock script retrieval rev 5 2024-03-14
suricata ET MALWARE [CrowdStrike] ANCHOR PANDA Torn RAT Beacon Message rev 4 2024-03-14
suricata ET MALWARE SharpNoPSExec EXE Lateral Movement Tool Downloaded rev 3 2024-03-14
suricata ET WEB_CLIENT Microsoft Tech Support Phone Scam Landing 2018-09-12 rev 3 2024-03-14
suricata GPL CHAT IRC Channel join rev 14 2024-03-14
suricata ET PHISHING Successful Generic Credential Phish - Loading Messages 2015-08-12 rev 6 2024-03-14
suricata ET PHISHING Facebook Phishing Landing 2018-02-15 rev 2 2024-03-14
suricata ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2024-03-14
suricata GPL NETBIOS SMB irot unicode bind attempt rev 5 2024-03-14
suricata ET PHISHING Github Phishing Landing 2018-07-19 rev 2 2024-03-14
suricata ET EXPLOIT_KIT KaiXin Landing M3 rev 4 2024-03-14
suricata ET INFO WebRTC IP tracking Javascript rev 4 2024-03-14
suricata GPL NETBIOS SMB-DS IPC$ unicode share access rev 10 2024-03-14
suricata ET EXPLOIT F5 BIG-IP rsync cmi authorized_keys successful exfiltration rev 6 2024-03-14
suricata ET PHISHING Chase Phishing Landing 2018-01-18 rev 2 2024-03-14
suricata ET INFO Office Document Download Containing AutoOpen Macro rev 5 2024-03-14
suricata GPL NETBIOS SMB winreg create tree attempt rev 10 2024-03-14
suricata ET EXPLOIT_KIT Magnitude/Hunter EK IE Exploit Aug 23 2015 rev 4 2024-03-14
suricata ET EXPLOIT_KIT Possible Sweet Orange redirection 21 July 2014 rev 4 2024-03-14
suricata ET PHISHING Possible Raiffeisen Bank Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET PHISHING Outlook Web App Phishing Landing 2018-02-07 rev 2 2024-03-14
suricata ET PHISHING Generic PhishKit Author Comment M3 2018-08-30 rev 2 2024-03-14