Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET EXPLOIT Ghostscript invalidcheck escape attempt rev 2 2024-03-14
suricata ET WEB_CLIENT Fake Adobe Flash Update Landing - Title over non SSL rev 3 2024-03-14
suricata ET PHISHING Upgrade Advantage Phishing Landing 2018-02-22 rev 2 2024-03-14
suricata GPL NETBIOS SMB-DS winreg unicode bind attempt rev 10 2024-03-14
suricata ET PHISHING Apple Phishing Landing Nov 10 2017 rev 3 2024-03-14
suricata ET MALWARE JS/Nemucod.M.gen downloading PDF payload rev 3 2024-03-14
suricata ET PHISHING Excel/Adobe Online Phishing Landing Nov 25 2015 rev 5 2024-03-14
suricata ET EXPLOIT_KIT SofosFO/GrandSoft landing applet plus class Mar 03 2013 rev 6 2024-03-14
suricata ET WEB_CLIENT Tech Support Phone Scam Landing 2017-07-26 rev 3 2024-03-14
suricata ET EXPLOIT_KIT Suspicious JS Observed in Unknown EK Landing rev 3 2024-03-14
suricata ET EXPLOIT_KIT ReverseLoader Base64 Payload Inbound rev 3 2024-03-14
suricata ET EXPLOIT_KIT SunDown EK RIP Landing M1 B643 rev 3 2024-03-14
suricata GPL NETBIOS SMB-DS winreg create tree attempt rev 9 2024-03-14
suricata ET PHISHING Upgrade Email Account Phishing Landing 2018-03-12 rev 2 2024-03-14
suricata ET WEB_SERVER Generic WSO Webshell Password Prompt Accessed on Internal Compromised Server rev 3 2024-03-14
suricata ET PHISHING Successful Zimbra Phish 2015-11-03 rev 4 2024-03-14
suricata GPL NETBIOS SMB-DS winreg bind attempt rev 5 2024-03-14
suricata GPL NETBIOS SMB ISystemActivator bind attempt rev 5 2024-03-14
suricata ET WEB_CLIENT Fake AV Phone Scam Landing July 20 2015 M4 rev 4 2024-03-14
suricata ET MALWARE DragonOK KHRAT Downloader Receiving Payload rev 3 2024-03-14
suricata ET EXPLOIT_KIT Terror EK Landing T1 Jun 02 2017 M2 rev 3 2024-03-14
suricata ET MALWARE VirRansom/VirLock Checkin rev 3 2024-03-14
suricata ET PHISHING Dropbox Business Phishing Landing 2018-02-07 rev 3 2024-03-14
suricata GPL NETBIOS DCERPC irot bind attempt rev 4 2024-03-14
suricata ET EXPLOIT_KIT Spelevo EK Landing M1 rev 3 2024-03-14
suricata ET PHISHING Bank of America Phishing Landing 2018-01-18 M2 rev 2 2024-03-14
suricata ET EXPLOIT Possible CVE-2014-6332 DECS2 rev 5 2024-03-14
suricata ET TELNET busybox ECCHI hackers - Possible Brute Force Attack rev 3 2024-03-14
suricata ET PHISHING Microsoft Questionnaire Phishing Landing 2018-01-19 rev 2 2024-03-14
suricata ET MALWARE KL-Remote / Cryp_Banker14 RAT response rev 4 2024-03-14
suricata ET INFO Outbound MSSQL Connection to Non-Standard Port - Likely Malware rev 5 2024-03-14
suricata ET PHISHING Successful DHL Phish 2015-09-14 rev 5 2024-03-14
suricata ET PHISHING Facebook Phishing Landing 2018-02-14 rev 2 2024-03-14
suricata ET INFO JAVA - Java Serialized Data Download rev 6 2024-03-14
suricata ET PHISHING Possible Apple Store Phish Landing 2015-07-30 rev 4 2024-03-14
suricata ET PHISHING Turbotax Phishing Landing 2018-01-30 rev 2 2024-03-14
suricata ET PHISHING Phishing Fake Document Loading Error 2015-10-01 rev 4 2024-03-14
suricata ET WEB_CLIENT DRIVEBY GENERIC ShellExecute in Hex No Seps rev 3 2024-03-14
suricata GPL NETBIOS SMB-DS ISystemActivator little endian bind attempt rev 5 2024-03-14
suricata ET WEB_CLIENT Microsoft Tech Support Scam Landing M1 Oct 13 2017 rev 3 2024-03-14