Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET EXPLOIT Shenzhen TVT DVR/NVR/IPC Hardcoded Credential ConfigSyncProc System Details Request rev 2 2024-03-14
suricata ET PHISHING Possible Google Drive/Dropbox Phishing Landing Jul 10 2015 rev 4 2024-03-14
suricata ET PHISHING Facebook Upgrade Payment Phishing Landing 2018-02-05 rev 2 2024-03-14
suricata ET EXPLOIT_KIT Spelevo EK Landing M3 rev 2 2024-03-14
suricata ET INFO ZoneAlarm Download Flowbit Set rev 4 2024-03-14
suricata ET PHISHING Smartsheet Phishing Landing 2018-01-29 rev 3 2024-03-14
suricata ET MALWARE SharpExec EXE Lateral Movement Tool Downloaded rev 2 2024-03-14
suricata ET MALWARE PE EXE or DLL Windows file download Text M2 rev 3 2024-03-14
suricata ET MALWARE SharpNoPSExec EXE Lateral Movement Tool Downloaded rev 3 2024-03-14
suricata ET MALWARE NanoCore RAT Keepalive Response 4 rev 3 2024-03-14
suricata ET EXPLOIT_KIT Double-Encoded Reverse Base64/Dean Edwards Packed JavaScript Observed in Unknown EK Feb 16 2015 b64 1 M2 rev 4 2024-03-14
suricata ET WEB_CLIENT PDF With Hidden Embedded File rev 3 2024-03-14
suricata ET PHISHING Wells Fargo Phishing Landing 2018-02-22 rev 3 2024-03-14
suricata ET PHISHING PDF Cloud Phishing Landing 2018-04-19 rev 2 2024-03-14
suricata ET WEB_CLIENT Google Chrome Pdfium JPEG2000 Heap Overflow rev 3 2024-03-14
suricata ET PHISHING Mailbox Verification Phishing Landing 2018-01-31 rev 3 2024-03-14
suricata ET PHISHING Possible Chase Phishing Landing - Title over non SSL rev 2 2024-03-14
suricata ET MALWARE DarkComet-RAT init connection rev 6 2024-03-14
suricata ET PHISHING Successful Generic .EDU Phish Aug 17 2017 rev 7 2024-03-14
suricata ET EXPLOIT_KIT TDS Sutra - page redirecting to a SutraTDS rev 10 2024-03-14
suricata ET INFO Vulnerable Java Version 20.0.x Detected rev 2 2024-03-14
suricata ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3 rev 4 2024-03-14
suricata GPL NETBIOS SMB-DS msqueue unicode bind attempt rev 5 2024-03-14
suricata ET PHISHING Generic Xbalti Phishing Landing 2018-11-26 rev 2 2024-03-14
suricata ET EXPLOIT QNAP Shellshock script retrieval rev 5 2024-03-14
suricata GPL NETBIOS DCERPC IActivation little endian bind attempt rev 4 2024-03-14
suricata ET MALWARE Sourtoff Download Simda Request rev 4 2024-03-14
suricata GPL NETBIOS SMB-DS llsrpc unicode little endian bind attempt rev 5 2024-03-14
suricata ET HUNTING SUSPICIOUS PPT Download with Embedded OLE Object rev 7 2024-03-14
suricata ET PHISHING Generic PhishKit Author Comment M4 2018-08-30 rev 2 2024-03-14
suricata ET TELNET busybox MIRAI hackers - Possible Brute Force Attack rev 4 2024-03-14
suricata ET MALWARE Possible AMSI Powershell Bypass Attempt rev 3 2024-03-14
suricata ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M1 rev 2 2024-03-14
suricata ET PHISHING Chase Phishing Landing 2018-01-18 rev 2 2024-03-14
suricata ET MALWARE Socks666 Connection Initial Packet rev 6 2024-03-14
suricata ET EXPLOIT Possible SAP NetWeaver CVE-2020-6287 Exploit Success rev 3 2024-03-14
suricata GPL NETBIOS SMB-DS DCERPC LSASS unicode bind attempt rev 10 2024-03-14
suricata ET EXPLOIT_KIT DRIVEBY Sednit EK IE Exploit CVE-2013-1347 M1 rev 4 2024-03-14
suricata ET EXPLOIT Possible ETERNALROMANCE MS17-010 rev 3 2024-03-14
suricata ET PHISHING Paypal Phishing Landing 2017-12-26 rev 2 2024-03-14