Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET INFO Inbound PowerShell Capable of Enumerating Internal Network via WMI rev 4 2024-03-07
suricata ET PHISHING Successful Paypal Phish M2 2015-11-03 rev 7 2024-03-07
suricata ET WEB_CLIENT Possible FFSniff Inject Observed rev 4 2024-03-07
suricata ET PHISHING Email Storage Upgrade Phishing Landing 2016-08-15 rev 4 2024-03-07
suricata ET EXPLOIT NTDump Session Established Reg-Entry port 445 rev 8 2024-03-07
suricata ET ADWARE_PUP Searchmeup Spyware Receiving Commands rev 12 2024-03-07
suricata ET PHISHING Successful HM Revenue Phish 2016-10-06 rev 7 2024-03-07
suricata ET MALWARE FastPOS Reporting Error Code rev 4 2024-03-07
suricata ET MALWARE CenterPOS User Agent Observed rev 3 2024-03-07
suricata ET PHISHING Successful Mailbox Shutdown Phish M2 2016-05-16 rev 5 2024-03-07
suricata ET PHISHING Successful Webmail Phish M3 2016-06-22 rev 5 2024-03-07
suricata ET PHISHING Successful BankAustria Phish Nov 03 2017 rev 4 2024-03-07
suricata ET MALWARE Possible CryptXXX Ransomware Renaming Encrypted File SMB v1 Unicode rev 2 2024-03-07
suricata ET EXPLOIT Exploit MS05-002 Malformed .ANI stack overflow attack rev 7 2024-03-07
suricata ET PHISHING Phishing Landing via Tripod.com M2 2016-03-31 rev 4 2024-03-07
suricata ET PHISHING Successful Exmo Cryptocurrency Exchange Phish Aug 28 2017 rev 4 2024-03-07
suricata ET MALWARE Banload CnC Activity rev 4 2024-03-07
suricata ET EXPLOIT Apache Struts getWriter and opensymphony inbound OGNL injection remote code execution attempt rev 4 2024-03-07
suricata ET PHISHING Successful Wells Fargo Phish 2016-05-26 rev 5 2024-03-07
suricata ET PHISHING Phishing Landing via Weebly.com M1 2016-02-02 rev 6 2024-03-07
suricata ET PHISHING Successful Bank of America Phish 2015-11-06 rev 6 2024-03-07
suricata ET PHISHING Successful Supplier Portal Phish 2016-10-07 rev 4 2024-03-07
suricata ET PHISHING Successful Poloniex Cryptocurrency Exchange Phish Aug 28 2017 rev 4 2024-03-07
suricata ET PHISHING Successful Paypal Phish M1 2016-01-19 rev 4 2024-03-07
suricata ET PHISHING DrSpam Phishing Landing CSS 2016-06-08 rev 4 2024-03-07
suricata ET MALWARE Possible Pipka JS Skimmer - Skimmer Payload Observed M6 rev 3 2024-03-07
suricata ET HUNTING Possible Covid19 Themed Email Spam Outbound M6 rev 3 2024-03-07
suricata ET PHISHING Successful Banamex Bank Phish 2016-12-29 rev 4 2024-03-07
suricata ET ADWARE_PUP Outerinfo.com Spyware Checkin rev 8 2024-03-07
suricata ET PHISHING Successful Chase Phish Dec 29 2016 rev 5 2024-03-07
suricata ET ADWARE_PUP Deskwizz.com Spyware Install INI Download rev 8 2024-03-07
suricata ET PHISHING Successful Amazon Phish 2015-11-07 rev 6 2024-03-07
suricata ET PHISHING Generic Encoded Phishing Landing 2021-03-10 rev 3 2024-03-07
suricata ET WEB_CLIENT Fake Virus Phone Scam Landing Mar 9 M2 rev 5 2024-03-07
suricata ET EXPLOIT Fastweb Fastgate 0.00.81 - Remote Code Execution rev 3 2024-03-07
suricata ET EXPLOIT ASUS RT-N56U/RT-AC66U Remote Code Execution rev 3 2024-03-07
suricata ET P2P BitTorrent Announce rev 7 2024-03-07
suricata ET MALWARE [PTsecurity] Adwind SSL Certificate Observed rev 4 2024-03-07
suricata ET ADWARE_PUP Gator/Clarian Agent rev 15 2024-03-07
suricata ET PHISHING Phishing Landing via MyFreeSites.com M2 2016-03-31 rev 4 2024-03-07