Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING DrSpam Phishing Landing CSS 2016-06-08 rev 4 2024-03-07
suricata ET ADWARE_PUP Outerinfo.com Spyware Checkin rev 8 2024-03-07
suricata ET MALWARE FastPOS Reporting Error Code rev 4 2024-03-07
suricata ET SCAN Possible Nmap User-Agent Observed rev 5 2024-03-07
suricata ET EXPLOIT Exploit MS05-002 Malformed .ANI stack overflow attack rev 7 2024-03-07
suricata ET PHISHING Successful Supplier Portal Phish 2016-10-07 rev 4 2024-03-07
suricata ET MALWARE NetBackdoor Checkin rev 4 2024-03-07
suricata ET PHISHING Successful Chase Phish 2015-12-22 rev 5 2024-03-07
suricata ET MALWARE CSharp SMB Scanner Assembly in PowerShell Inbound M2 rev 4 2024-03-07
suricata ET SCAN MS Terminal Server Traffic on Non-standard Port rev 4 2024-03-07
suricata ET WEB_SERVER Aribitrary File Upload Vulnerability in WP Mobile Detector rev 5 2024-03-07
suricata ET PHISHING Successful SFR Account Phish 2015-09-01 rev 6 2024-03-07
suricata ET PHISHING Dropbox Phishing Landing May 31 2017 rev 4 2024-03-07
suricata ET PHISHING Apple Phishing Landing 2016-03-01 M3 rev 4 2024-03-07
suricata ET PHISHING Possible Successful Chase Phish Feb 02 2017 rev 5 2024-03-07
suricata ET PHISHING Successful UK Tax Phishing M1 2016-02-01 rev 5 2024-03-07
suricata ET MALWARE Domen SocEng Redirect - Landing Page Observed rev 3 2024-03-07
suricata ET EXPLOIT Netgear DGN Remote Command Execution rev 3 2024-03-07
suricata ET EXPLOIT Serialized Java Object Generated by ysoserial rev 2 2024-03-07
suricata ET MALWARE Backdoor.Win32.DarkComet Keepalive Outbound rev 2 2024-03-07
suricata ET ADWARE_PUP Gator/Claria Data Submission rev 18 2024-03-07
suricata ET PHISHING Successful Outlook Password Update Phish M2 2016-09-01 rev 4 2024-03-07
suricata ET EXPLOIT Possible WINS Server Remote Memory Corruption Vulnerability rev 2 2024-03-07
suricata ET EXPLOIT Linksys E-Series Device RCE Attempt Outbound rev 3 2024-03-07
suricata ET PHISHING Adobe Phishing Landing M1 2016-08-16 rev 4 2024-03-07
suricata ET INFO IP Logger Redirect Domain in SNI rev 4 2024-03-07
suricata ET PHISHING Adobe Shared Document Phishing Landing Common CSS 2016-08-10 rev 4 2024-03-07
suricata ET PHISHING Shared Document Phishing Landing Nov 16 2016 rev 4 2024-03-07
suricata ET PHISHING Successful Poloniex Cryptocurrency Exchange Phish Aug 28 2017 rev 4 2024-03-07
suricata ET PHISHING Successful Bank of America Phish 2015-11-06 rev 6 2024-03-07
suricata ET PHISHING Successful Amazon Phish 2015-11-07 rev 6 2024-03-07
suricata ET PHISHING Microsoft Live Email Account Phishing Landing Mar 16 2017 rev 4 2024-03-07
suricata ET PHISHING Possible Office 365 Phishing Landing 2016-08-24 rev 5 2024-03-07
suricata ET PHISHING Phishing Landing via Weebly.com 2016-06-22 rev 5 2024-03-07
suricata ET PHISHING Successful Blocked Email Account Phish M2 2016-08-23 rev 4 2024-03-07
suricata ET MALWARE Towerweb Ransomware Landing Page rev 5 2024-03-07
suricata ET PHISHING Possible Phishing Blockchain title over non SSL Jul 10 2017 rev 4 2024-03-07
suricata ET PHISHING Microsoft Encrypted Email Phishing Landing 2016-06-23 rev 4 2024-03-07
suricata ET P2P ed2k file request answer rev 12 2024-03-07
suricata ET MALWARE Miniduke variant C&C activity rev 6 2024-03-07