Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Email Account Exceeded Quota Phishing Landing 2016-07-11 rev 3 2024-03-14
suricata ET PHISHING GitLab Phishing Landing 2018-07-19 rev 3 2024-03-14
suricata ET PHISHING Successful Fake Webmail Quota Phish 2015-09-10 rev 5 2024-03-14
suricata ET HUNTING SUSPICIOUS Path to BusyBox rev 3 2024-03-14
suricata ET TELNET busybox ECCHI hackers - Possible Brute Force Attack rev 3 2024-03-14
suricata ET MALWARE Alphacrypt/TeslaCrypt Ransomware CnC Beacon Response rev 4 2024-03-14
suricata ET MALWARE NanoCore RAT Keepalive 2 rev 3 2024-03-14
suricata ET MALWARE nspps Backdoor - Task Response rev 2 2024-03-14
suricata GPL NETBIOS SMB-DS winreg bind attempt rev 5 2024-03-14
suricata ET INFO JAVA - Java Serialized Data Download rev 6 2024-03-14
suricata ET MALWARE Possibly Malicious Double Base64 Unicode Net.ServicePointManager M3 rev 4 2024-03-14
suricata ET MALWARE KL-Remote / Cryp_Banker14 RAT response rev 4 2024-03-14
suricata ET PHISHING PHOEN!X Apple Phish Landing Page 2015-12-29 rev 3 2024-03-14
suricata ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2024-03-14
suricata ET WEB_CLIENT pshell dl/execute primitives in wideb64 3 rev 3 2024-03-14
suricata ET EXPLOIT_KIT SunDown EK RIP Landing M4 B642 rev 3 2024-03-14
suricata ET PHISHING Successful DHL Phish 2015-09-14 rev 5 2024-03-14
suricata ET PHISHING Facebook Mobile Phishing Landing 2018-02-26 rev 2 2024-03-14
suricata ET PHISHING Possible Apple Store Phish Landing 2015-07-30 rev 4 2024-03-14
suricata ET PHISHING Chase Phishing Landing 2018-03-28 rev 2 2024-03-14
suricata ET PHISHING Paypal Phishing Landing 2018-01-29 rev 2 2024-03-14
suricata ET PHISHING Upgrade Email Account Phishing Landing 2018-03-12 rev 2 2024-03-14
suricata ET EXPLOIT_KIT SofosFO/GrandSoft landing applet plus class Mar 03 2013 rev 6 2024-03-14
suricata ET WEB_CLIENT pshell dl/execute primitives in wideb64 5 rev 3 2024-03-14
suricata ET MALWARE DragonOK KHRAT Downloader Receiving Payload rev 3 2024-03-14
suricata ET MALWARE OSX/WireLurker CnC Beacon rev 5 2024-03-14
suricata ET MALWARE Possible Veil Powershell Encoder B643 rev 3 2024-03-14
suricata ET ATTACK_RESPONSE passwd file Outbound from WEB SERVER Linux rev 2 2024-03-14
suricata ET EXPLOIT_KIT Redkit Landing Page URL March 03 2013 rev 8 2024-03-14
suricata ET INFO SMB Executable File Transfer rev 3 2024-03-14
suricata ET PHISHING Generic PhishKit Author Comment M8 2018-08-30 rev 2 2024-03-14
suricata ET PHISHING Possible Google Drive Phishing Landing 2015-07-13 rev 4 2024-03-14
suricata ET PHISHING Chase Account Phish Landing Oct 22 rev 3 2024-03-14
suricata ET INFO Vulnerable Java Version 1.7.x Detected rev 64 2024-03-14
suricata ET EXPLOIT_KIT ScanBox Jun 06 2015 M1 T1 rev 4 2024-03-14
suricata ET PHISHING Microsoft Questionnaire Phishing Landing 2018-01-19 rev 2 2024-03-14
suricata ET PHISHING MyADP Phishing Landing 2018-04-19 rev 2 2024-03-14
suricata ET INFO Possible SSLv2 Negotiation in Progress Client Master Key SSL2_DES_64_CBC_WITH_MD5 rev 3 2024-03-14
suricata GPL NETBIOS SMB ISystemActivator bind attempt rev 5 2024-03-14
suricata ET EXPLOIT_KIT Disdain EK Flash Exploit M3 Aug 23 2017 rev 3 2024-03-14