Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Potential Data URI Phishing Oct 02 2015 rev 4 2024-03-14
suricata ET INFO Adobe Flash Uncompressed in HTTP Flowbit Set rev 9 2024-03-14
suricata ET PHISHING PHOEN!X Phish Loading Page 2015-12-29 rev 3 2024-03-14
suricata ET INFO Radmin Remote Control Session Authentication Initiate rev 6 2024-03-14
suricata ET EXPLOIT Ghostscript setpattern type confusion attempt rev 2 2024-03-14
suricata ET EXPLOIT_KIT StyX Landing Page rev 8 2024-03-14
suricata ET PHISHING LCL Banque Phishing Landing 2018-04-19 rev 3 2024-03-14
suricata ET PHISHING Metro Document Phishing Landing 2015-11-17 rev 4 2024-03-14
suricata ET EXPLOIT_KIT DRIVEBY Sednit EK IE Exploit CVE-2014-1776 M1 rev 5 2024-03-14
suricata ET MALWARE JST Perl IrcBot download rev 4 2024-03-14
suricata ET WEB_CLIENT Samsung Galaxy Knox Android Browser RCE smdm attempt rev 5 2024-03-14
suricata ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2024-03-14
suricata ET EXPLOIT CVE-2018-8174 Common Construct B64 M2 rev 2 2024-03-14
suricata ET PHISHING Possible Alibaba Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET MALWARE PNScan.2 Inbound Status Check - set rev 5 2024-03-14
suricata ET PHISHING Possible MyEtherWallet Phishing Landing - Title over non SSL rev 2 2024-03-14
suricata ET PHISHING AES Crypto Observed in Javascript - Possible Phishing Landing rev 5 2024-03-14
suricata ET WEB_CLIENT Evil Redirect Compromised WP Feb 01 2016 rev 6 2024-03-14
suricata ET EXPLOIT Possible Internet Explorer VBscript failure to handle error case information disclosure CVE-2014-6332 Common Construct M2 rev 4 2024-03-14
suricata GPL NETBIOS SMB-DS nddeapi unicode bind attempt rev 8 2024-03-14
suricata ET MALWARE Evil JS Ransomware rev 3 2024-03-14
suricata ET PHISHING Mailbox Renewal Phish Landing Nov 13 rev 3 2024-03-14
suricata ET CHAT IRC PRIVMSG command rev 22 2024-03-14
suricata ET EXPLOIT_KIT GrandSoft EK IE Exploit Jan 30 2018 rev 4 2024-03-14
suricata ET PHISHING PayPal Phishing Landing Nov 24 2014 rev 5 2024-03-14
suricata ET INFO ZoneAlarm Download Flowbit Set rev 4 2024-03-14
suricata GPL NETBIOS SMB msqueue bind attempt rev 5 2024-03-14
suricata GPL NETBIOS SMB-DS IActivation little endian bind attempt rev 5 2024-03-14
suricata ET EXPLOIT_KIT Probable Sakura exploit kit landing page obfuscated applet tag Mar 28 2013 rev 5 2024-03-14
suricata ET MALWARE PawnStorm Java Class Stage 2 M2 Aug 28 2015 rev 3 2024-03-14
suricata ET CHAT GaduGadu Chat Server Available Status Packet rev 5 2024-03-14
suricata GPL NETBIOS SMB ISystemActivator little endian bind attempt rev 5 2024-03-14
suricata ET INFO Cisco Data Center Network Manager - Vulnerable Version Detected 11.1 rev 3 2024-03-14
suricata ET EXPLOIT_KIT Probable Sakura exploit kit landing page obfuscated applet tag Mar 1 2013 rev 5 2024-03-14
suricata ET MALWARE Possible AMSI Powershell Bypass Attempt B643 rev 3 2024-03-14
suricata ET PHISHING Wells Fargo Phishing Landing 2018-02-02 M7 rev 2 2024-03-14
suricata ET PHISHING Yahoo Phishing Landing 2018-02-20 rev 2 2024-03-14
suricata ET ADWARE_PUP Suspicious Darkwave Popads Pop Under Redirect rev 3 2024-03-14
suricata ET INFO Anonymous LDAPv3 Bind Request Outbound rev 3 2024-03-14
suricata ET PHISHING Generic Phishing Landing 2018-01-12 rev 2 2024-03-14