Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Mailbox Update Phishing Landing M2 2016-05-16 rev 4 2024-03-07
suricata ET PHISHING Successful Chase Phish 2015-12-22 rev 5 2024-03-07
suricata ET PHISHING Successful UK Tax Phishing M1 2016-02-01 rev 5 2024-03-07
suricata ET MALWARE FlawedGrace CnC Activity rev 4 2024-03-07
suricata ET MALWARE CenterPOS User Agent Observed rev 3 2024-03-07
suricata ET PHISHING Possible Successful Chase Phish Feb 02 2017 rev 5 2024-03-07
suricata ET EXPLOIT BlueCoat CAS v1.3.7.1 Report Email Command Injection attempt rev 4 2024-03-07
suricata ET EXPLOIT Serialized Java Object Generated by ysoserial rev 2 2024-03-07
suricata ET PHISHING Avast Phishing Landing 2016-06-02 rev 4 2024-03-07
suricata ET PHISHING Phishing Landing via Tripod.com M2 2016-03-31 rev 4 2024-03-07
suricata ET PHISHING Successful Generic OWA Phish 2016-10-04 rev 4 2024-03-07
suricata ET PHISHING Observed UK Gov Support Landing 2021-06-01 rev 2 2024-03-07
suricata ET SCAN MS Terminal Server Traffic on Non-standard Port rev 4 2024-03-07
suricata ET ADWARE_PUP Deskwizz.com Spyware Install INI Download rev 8 2024-03-07
suricata ET MALWARE Inbound PowerShell Executing Base64 Decoded VBE from Temp 2018-11-29 rev 5 2024-03-07
suricata ET PHISHING Adobe Shared Document Phishing Landing Common CSS 2016-08-10 rev 4 2024-03-07
suricata ET EXPLOIT Possible WINS Server Remote Memory Corruption Vulnerability rev 2 2024-03-07
suricata ET ADWARE_PUP Casino on Net Reporting Data rev 12 2024-03-07
suricata ET PHISHING Possible Successful Apple Phish 2015-07-31 rev 6 2024-03-07
suricata ET PHISHING Successful Outlook Password Update Phish M2 2016-09-01 rev 4 2024-03-07
suricata ET MALWARE DFKRAT CnC Checkin M1 rev 1 2024-03-07
suricata ET MALWARE CSharp SMB Scanner Assembly in PowerShell Inbound M2 rev 4 2024-03-07
suricata ET EXPLOIT Linksys E-Series Device RCE Attempt Outbound rev 3 2024-03-07
suricata ET PHISHING Possible Ebay Phishing Domain Jan 30 2017 rev 5 2024-03-07
suricata ET PHISHING Successful SFR Account Phish 2015-09-01 rev 6 2024-03-07
suricata ET WEB_SERVER Aribitrary File Upload Vulnerability in WP Mobile Detector rev 5 2024-03-07
suricata ET INFO IP Logger Redirect Domain in SNI rev 4 2024-03-07
suricata ET EXPLOIT Apache Struts getWriter and opensymphony inbound OGNL injection remote code execution attempt rev 4 2024-03-07
suricata ET PHISHING Adobe Phishing Landing M1 2016-08-16 rev 4 2024-03-07
suricata ET EXPLOIT Exploit MS05-002 Malformed .ANI stack overflow attack rev 7 2024-03-07
suricata ET MALWARE HTML/Xbash Hex Encoded WScript.Shell Inbound - Stage 1 rev 3 2024-03-07
suricata ET PHISHING Successful PHOEN!X Apple Phish M1 2015-12-29 rev 6 2024-03-07
suricata ET PHISHING Successful Banamex Bank Phish 2016-12-29 rev 4 2024-03-07
suricata ET MALWARE CSharp SMB Scanner Assembly in PowerShell Inbound M1 rev 5 2024-03-07
suricata ET MALWARE [PTsecurity] Adwind SSL Certificate Observed rev 4 2024-03-07
suricata ET PHISHING DHL Phishing Landing 2016-01-07 rev 5 2024-03-07
suricata ET PHISHING Successful BankAustria Phish Nov 03 2017 rev 4 2024-03-07
suricata ET MALWARE Possible CryptXXX Ransomware Renaming Encrypted File SMB v1 Unicode rev 2 2024-03-07
suricata ET MALWARE Quant Loader Download Response M2 rev 5 2024-03-07
suricata ET PHISHING Google Drive Phishing Landing 2016-08-25 rev 4 2024-03-07