Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Observed Lactrodectus Domain in TLS SNI rev 1 2024-02-26
suricata ET MALWARE Observed Lactrodectus Domain in TLS SNI rev 1 2024-02-26
suricata ET MALWARE DNS Query to Lactrodectus Domain rev 1 2024-02-26
suricata ET MALWARE PyRation Variant - Configuration Response rev 1 2024-02-26
sigma DNS Query Request To OneLaunch Update Service test 2024-02-26
sigma AWS Console GetSigninToken Potential Abuse test 2024-02-26
sigma .Class Extension URI Ending Request test 2024-02-26
sigma Remote Access Tool - ScreenConnect Remote Command Execution - Hunting test 2024-02-26
sigma HackTool - Empire UserAgent URI Combo test 2024-02-26
sigma Remote Access Tool - ScreenConnect Remote Command Execution test 2024-02-26
sigma ComRAT Network Communication test 2024-02-26
sigma Remote Access Tool - ScreenConnect Installation Execution test 2024-02-26
sigma Active Directory User Backdoors test 2024-02-26
sigma Remote Access Tool - ScreenConnect Server Web Shell Execution test 2024-02-26
sigma HackTool - Evil-WinRm Execution - PowerShell Module test 2024-02-25
sigma Bitbucket Global Permission Changed test 2024-02-25
sigma Bitbucket User Login Failure Via SSH test 2024-02-25
sigma Bitbucket Global SSH Settings Changed test 2024-02-25
sigma Bitbucket Global Secret Scanning Rule Deleted test 2024-02-25
sigma Bitbucket Full Data Export Triggered test 2024-02-25
sigma Bitbucket Unauthorized Access To A Resource test 2024-02-25
sigma Bitbucket Unauthorized Full Data Export Triggered test 2024-02-25
sigma Bitbucket User Permissions Export Attempt test 2024-02-25
sigma Bitbucket User Details Export Attempt Detected test 2024-02-25
sigma Bitbucket Secret Scanning Rule Deleted test 2024-02-25
sigma Bitbucket User Login Failure test 2024-02-25
sigma Bitbucket Secret Scanning Exempt Repository Added test 2024-02-25
sigma Bitbucket Project Secret Scanning Allowlist Added test 2024-02-25
sigma Bitbucket Audit Log Configuration Updated test 2024-02-25
sigma User Added To Highly Privileged Group test 2024-02-23
sigma Remote Access Tool - Simple Help Execution test 2024-02-23
sigma Suspicious File Download From IP Via Wget.EXE - Paths test 2024-02-23
sigma Weak or Abused Passwords In CLI test 2024-02-23
sigma ScreenConnect - SlashAndGrab Exploitation Indicators test 2024-02-23
sigma Mshtml.DLL RunHTMLApplication Suspicious Usage test 2024-02-23
snort ET EXPLOIT CVE-2024-25600 Bricks Exploitation Attempt rev 2 2024-02-22
snort ET TROJAN Elusive Stealer CnC Exfil via Telegram rev 1 2024-02-22
suricata ET EXPLOIT CVE-2024-25600 Bricks Exploitation Attempt rev 2 2024-02-22
elastic Potential Linux Reverse Connection through Port Knocking deprecated 2024-02-22
snort ET TROJAN [ANY.RUN] SilentCryptoMiner Check-in POST Request rev 1 2024-02-21