Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata GPL NETBIOS DCERPC irot little endian bind attempt rev 4 2024-03-14
suricata GPL NETBIOS SMB msqueue bind attempt rev 5 2024-03-14
suricata ET EXPLOIT GoCD Authentication Bypass Successful Leak rev 3 2024-03-14
suricata ET PHISHING Apple Account Phishing Landing 2015-11-18 rev 5 2024-03-14
suricata ET MALWARE WaterDropX PRISM CnC Response rev 4 2024-03-14
suricata ET PHISHING AT&T Phishing Landing 2018-01-23 rev 3 2024-03-14
suricata ET MALWARE HTTPCore CnC Tasking File rev 3 2024-03-14
suricata ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 rev 4 2024-03-14
suricata ET TELNET busybox MIRAI hackers - Possible Brute Force Attack rev 4 2024-03-14
suricata ET EXPLOIT QNAP Shellshock script retrieval rev 5 2024-03-14
suricata ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST M1 rev 2 2024-03-14
suricata ET EXPLOIT_KIT Possible Evil Redirector Leading to EK June 10 2015 rev 13 2024-03-14
suricata ET EXPLOIT Xiongmai/HiSilicon DVR - OpenTelnet Inbound - Possilbe CVE-2020-22253 Attempt rev 2 2024-03-14
suricata ET PHISHING Google Drive Phishing Landing 2015-07-28 rev 4 2024-03-14
suricata ET PHISHING Hellion Postmaster Phishing Landing 2018-08-30 rev 2 2024-03-14
suricata ET MALWARE Socks666 Connection Initial Packet rev 6 2024-03-14
suricata ET PHISHING Generic XBALTI Phishing Landing rev 2 2024-03-14
suricata ET EXPLOIT Possible Metasploit Java Exploit rev 8 2024-03-14
suricata ET PHISHING Google Drive Phishing Landing 2015-11-06 rev 4 2024-03-14
suricata ET PHISHING Paypal Phishing Landing 2017-12-26 rev 2 2024-03-14
suricata ET EXPLOIT Possible ETERNALBLUE MS17-010 Echo Response rev 4 2024-03-14
suricata GPL NETBIOS SMB-DS irot little endian bind attempt rev 5 2024-03-14
suricata ET PHISHING Possible Capital One Phishing Landing - Title over non SSL rev 2 2024-03-14
suricata ET PHISHING Possible Facebook Help Center Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET EXPLOIT Possible Spectre PoC Download In Progress rev 3 2024-03-14
suricata ET CHAT GaduGadu Chat Server Welcome Packet rev 7 2024-03-14
suricata ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2024-03-14
suricata ET EXPLOIT_KIT Disdain EK Payload Aug 23 2017 rev 4 2024-03-14
suricata ET MALWARE SharpExec EXE Lateral Movement Tool Downloaded rev 2 2024-03-14
suricata ET MALWARE [CrowdStrike] ANCHOR PANDA Torn RAT Beacon Message rev 4 2024-03-14
suricata ET PHISHING LinkedIn Phishing Landing 2018-02-09 M1 rev 3 2024-03-14
suricata ET PHISHING Possible Successful Apple Phish 2015-07-27 rev 4 2024-03-14
suricata ET INFO Zip File rev 7 2024-03-14
suricata ET PHISHING Possible Raiffeisen Bank Phishing Landing - Title over non SSL rev 3 2024-03-14
suricata ET PHISHING Netflix Phishing Landing 2018-05-09 rev 2 2024-03-14
suricata ET PHISHING Chase Phishing Landing 2018-01-18 rev 2 2024-03-14
suricata ET MALWARE Possible AMSI Powershell Bypass Attempt rev 3 2024-03-14
suricata ET PHISHING Paypal Phishing Landing 2018-08-07 rev 2 2024-03-14
suricata GPL EXPLOIT login buffer non-evasive overflow attempt rev 6 2024-03-14
suricata ET MALWARE Drovorub monitor Module Server Response rev 3 2024-03-14