Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Possible Google Docs Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET EXPLOIT_KIT Cool Exploit Kit Plugin-Detect July 08 2013 rev 4 2024-03-14
suricata ET MALWARE OSX/Mokes.A CnC Heartbeat rev 3 2024-03-14
suricata ET PHISHING Verizon Wireless Phishing Landing 2018-01-30 rev 2 2024-03-14
suricata ET PHISHING Successful Generic Adobe Phish 2019-07-29 rev 2 2024-03-14
suricata ET WEB_CLIENT WSO 2.6 Webshell Accessed on External Compromised Server rev 2 2024-03-14
suricata ET MALWARE Possible AMSI Powershell Bypass Attempt B642 rev 3 2024-03-14
suricata ET PHISHING DHL Phish Landing Sept 14 2015 rev 7 2024-03-14
suricata ET MALWARE JST Perl IrcBot download rev 4 2024-03-14
suricata ET PHISHING Metro Document Phishing Landing 2015-11-17 rev 4 2024-03-14
suricata ET INFO Adobe Flash Uncompressed in HTTP Flowbit Set rev 9 2024-03-14
suricata ET PHISHING PHOEN!X Phish Loading Page 2015-12-29 rev 3 2024-03-14
suricata ET EXPLOIT_KIT DRIVEBY Sednit EK IE Exploit CVE-2014-1776 M1 rev 5 2024-03-14
suricata GPL NETBIOS SMB-DS IActivation bind attempt rev 5 2024-03-14
suricata ET EXPLOIT CVE-2018-8174 Common Construct B64 M2 rev 2 2024-03-14
suricata ET PHISHING Yahoo Phishing Landing 2018-02-20 rev 2 2024-03-14
suricata ET INFO Java Downloading Class flowbit no alert rev 8 2024-03-14
suricata ET EXPLOIT_KIT KaiXin Landing Page Oct 05 2015 rev 4 2024-03-14
suricata ET EXPLOIT_KIT RIG EK Landing Feb 26 2016 rev 4 2024-03-14
suricata ET EXPLOIT_KIT RIG encrypted payload M1 Feb 02 2016 rev 4 2024-03-14
suricata ET INFO Java Downloading Archive flowbit no alert rev 8 2024-03-14
suricata ET INFO WinHttpRequest Downloading EXE rev 9 2024-03-14
suricata ET PHISHING Email Verification/Upgrade Phishing Landing 2018-01-22 rev 2 2024-03-14
suricata ET WEB_CLIENT Microsoft OLE Compound File Magic Bytes Flowbit Set rev 9 2024-03-14
suricata ET PHISHING Spotify Phishing Landing 2018-02-19 rev 2 2024-03-14
suricata ET EXPLOIT_KIT RIG EK Payload Jun 26 2016 rev 4 2024-03-14
suricata GPL NETBIOS SMB winreg unicode bind attempt rev 6 2024-03-14
suricata ET PHISHING Possible Free Mobile Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET EXPLOIT Possible Internet Explorer VBscript failure to handle error case information disclosure CVE-2014-6332 Common Construct M2 rev 4 2024-03-14
suricata ET PHISHING Possible Alibaba Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET PHISHING LCL Banque Phishing Landing 2018-04-19 rev 3 2024-03-14
suricata ET INFO Radmin Remote Control Session Authentication Initiate rev 6 2024-03-14
suricata ET WEB_SERVER Generic WSO Webshell Password Prompt Accessed on Internal Compromised Server rev 3 2024-03-14
suricata GPL NETBIOS SMB nddeapi unicode bind attempt rev 7 2024-03-14
suricata GPL NETBIOS SMB-DS nddeapi unicode bind attempt rev 8 2024-03-14
suricata ET EXPLOIT_KIT GrandSoft EK IE Exploit Jan 30 2018 rev 4 2024-03-14
suricata ET INFO Anonymous LDAPv3 Bind Request Outbound rev 3 2024-03-14
suricata ET PHISHING Wells Fargo Phishing Landing 2018-02-02 M7 rev 2 2024-03-14
suricata GPL NETBIOS SMB llsrpc unicode bind attempt rev 5 2024-03-14
suricata ET PHISHING Smartsheet Phishing Landing 2018-01-29 rev 3 2024-03-14