Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Quant Loader Download Response M2 rev 5 2024-03-07
suricata ET HUNTING Possible Covid19 Themed Email Spam Outbound M5 rev 3 2024-03-07
suricata ET PHISHING DrSpam Phishing Landing CSS 2016-06-08 rev 4 2024-03-07
suricata ET PHISHING Successful Mailbox Shutdown Phish M3 2016-05-16 rev 5 2024-03-07
suricata ET ADWARE_PUP 180solutions Spyware Keywords Download rev 13 2024-03-07
suricata ET EXPLOIT Exploit MS05-002 Malformed .ANI stack overflow attack rev 7 2024-03-07
suricata ET INFO FOX-SRT - Juniper ScreenOS SSH World Reachable rev 3 2024-03-07
suricata ET MALWARE DFKRAT CnC Checkin M1 rev 1 2024-03-07
suricata ET WEB_CLIENT Tech Support Scam Landing M2 2019-04-15 rev 4 2024-03-07
suricata ET ADWARE_PUP BInet Information Install Report rev 11 2024-03-07
suricata ET PHISHING Successful Paypal Phish M2 2016-09-29 rev 6 2024-03-07
suricata ET EXPLOIT Serialized Java Object Generated by ysoserial rev 2 2024-03-07
suricata ET EXPLOIT Linksys E-Series Device RCE Attempt Outbound rev 3 2024-03-07
suricata ET MALWARE HTML/Xbash Hex Encoded WScript.Shell Inbound - Stage 1 rev 3 2024-03-07
suricata ET PHISHING Observed UK Gov Support Landing 2021-06-01 rev 2 2024-03-07
suricata ET PHISHING Adobe Shared Document Phishing Landing Common CSS 2016-08-10 rev 4 2024-03-07
suricata ET EXPLOIT Apache Struts memberAccess and getWriter inbound OGNL injection remote code execution attempt rev 4 2024-03-07
suricata ET PHISHING Successful Apple Phish M3 2016-09-14 rev 5 2024-03-07
suricata ET PHISHING Adobe Shared Document Phishing Landing Nov 19 2015 rev 5 2024-03-07
suricata ET PHISHING Blocked Email Account Phishing Landing 2016-08-23 rev 4 2024-03-07
suricata ET MALWARE FastPOS Reporting Error Code rev 4 2024-03-07
suricata ET ADWARE_PUP Outerinfo.com Spyware Checkin rev 8 2024-03-07
suricata ET EXPLOIT Possible WINS Server Remote Memory Corruption Vulnerability rev 2 2024-03-07
suricata ET WEB_CLIENT JS ShellWindows/AddInProcess Win10 DeviceGuardBypass Inbound rev 3 2024-03-07
suricata ET PHISHING Successful Outlook Password Update Phish M2 2016-09-01 rev 4 2024-03-07
suricata ET PHISHING Successful HM Revenue Phish 2016-11-23 rev 4 2024-03-07
suricata ET WEB_SPECIFIC_APPS Apache Tomcat Possible CVE-2017-12617 JSP Upload Bypass Attempt rev 7 2024-03-07
suricata ET PHISHING Successful UK Tax Phishing M1 2016-02-01 rev 5 2024-03-07
suricata ET PHISHING Apple Phishing Landing M3 Sep 14 2017 rev 5 2024-03-07
suricata ET ATTACK_RESPONSE Windows SCM DLL Hijack Command Inbound via HTTP M1 rev 4 2024-03-07
suricata ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init rev 3 2024-03-07
suricata ET PHISHING Email Storage Upgrade Phishing Landing 2016-08-15 rev 4 2024-03-07
suricata ET PHISHING Successful SFR Account Phish 2015-09-01 rev 6 2024-03-07
suricata ET PHISHING USAA Phishing Landing 2016-02-26 rev 4 2024-03-07
suricata ET WEB_CLIENT Microsoft Tech Support Scam M1 2016-09-15 rev 4 2024-03-07
suricata ET MALWARE Proyecto RAT Variant - Yopmail Stage 2 CnC Retrieval rev 4 2024-03-07
suricata ET PHISHING Mailbox Update Phishing Landing M2 2016-05-16 rev 4 2024-03-07
suricata ET WEB_CLIENT Android Fake AV Download Landing Mar 06 2017 rev 4 2024-03-07
suricata ET ADWARE_PUP Gator/Claria Data Submission rev 18 2024-03-07
suricata ET EXPLOIT Pwdump3e pwservice.exe Access port 139 rev 9 2024-03-07