Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING DrSpam Phishing Landing CSS 2016-06-08 rev 4 2024-03-07
suricata ET PHISHING Possible Ebay Phishing Domain Jan 30 2017 rev 5 2024-03-07
suricata ET MALWARE Proyecto RAT Variant - Yopmail Stage 2 CnC Retrieval rev 4 2024-03-07
suricata ET PHISHING Apple Phishing Landing 2016-03-01 M2 rev 6 2024-03-07
suricata ET MALWARE CSharp SMB Scanner Assembly in PowerShell Inbound M1 rev 5 2024-03-07
suricata ET INFO Possible winexe over SMB - Possible Lateral Movement rev 4 2024-03-07
suricata ET PHISHING Adobe Phishing Landing M1 2016-08-16 rev 4 2024-03-07
suricata ET MALWARE FastPOS Successful Software Update Request rev 4 2024-03-07
suricata ET PHISHING USAA Phishing Landing 2016-02-26 rev 4 2024-03-07
suricata ET EXPLOIT Linksys E-Series Device RCE Attempt Outbound rev 3 2024-03-07
suricata ET ADWARE_PUP Gator/Claria Data Submission rev 18 2024-03-07
suricata ET EXPLOIT AVTECH Unauthenticated Command Injection in DVR Devices rev 3 2024-03-07
suricata ET PHISHING Phishing Landing via Webeden.co.uk M1 2016-01-22 rev 6 2024-03-07
suricata ET PHISHING Successful Amazon.com Phish M1 2016-06-27 rev 5 2024-03-07
suricata ET EXPLOIT Possible WINS Server Remote Memory Corruption Vulnerability rev 2 2024-03-07
suricata ET PHISHING DHL/EMS Documents Phishing Landing 2016-08-10 rev 4 2024-03-07
suricata ET MALWARE Inbound PowerShell Executing Base64 Decoded VBE from Temp 2018-11-29 rev 5 2024-03-07
suricata ET PHISHING JS Obfuscation - Possible Phishing 2016-03-01 rev 6 2024-03-07
suricata ET EXPLOIT Pwdump3e pwservice.exe Access port 139 rev 9 2024-03-07
suricata ET WEB_SERVER Apache Continuum Arbitrary Command Execution rev 5 2024-03-07
suricata ET PHISHING Successful SFR Account Phish 2015-09-01 rev 6 2024-03-07
suricata ET WEB_CLIENT Microsoft Tech Support Scam M1 2016-09-15 rev 4 2024-03-07
suricata ET PHISHING Successful HM Revenue Phish 2016-10-06 rev 7 2024-03-07
suricata ET PHISHING Successful Poste Italiane Phish 2016-12-23 rev 5 2024-03-07
suricata ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init rev 3 2024-03-07
suricata ET EXPLOIT Pwdump3e Session Established Reg-Entry port 139 rev 9 2024-03-07
suricata ET WEB_SERVER Aribitrary File Upload Vulnerability in WP Mobile Detector rev 5 2024-03-07
suricata ET PHISHING Successful Apple Phish M3 2016-09-14 rev 5 2024-03-07
suricata ET PHISHING Mailbox Update Phishing Landing M2 2016-05-16 rev 4 2024-03-07
suricata ET EXPLOIT Pwdump3e pwservice.exe Access port 445 rev 10 2024-03-07
suricata ET ADWARE_PUP 180solutions Spyware Keywords Download rev 13 2024-03-07
suricata ET WEB_CLIENT Android Fake AV Download Landing Mar 06 2017 rev 4 2024-03-07
suricata ET HUNTING Possible Covid19 Themed Email Spam Outbound M5 rev 3 2024-03-07
suricata ET EXPLOIT Serialized Java Object Generated by ysoserial rev 2 2024-03-07
suricata ET ADWARE_PUP Freeze.com Spyware Download rev 8 2024-03-07
suricata ET EXPLOIT BlueCoat CAS v1.3.7.1 Report Email Command Injection attempt rev 4 2024-03-07
suricata ET PHISHING Shared Document Phishing Landing Nov 16 2016 rev 4 2024-03-07
suricata ET HUNTING SUSPICIOUS Excel Add-in Download M2 rev 4 2024-03-07
suricata ET PHISHING Possible Phishing Landing via Moonfruit M2 2016-01-26 rev 5 2024-03-07
suricata ET PHISHING Observed UK Gov Support Landing 2021-06-01 rev 2 2024-03-07