Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Lazarus Group Backdoor CnC Checkin M1 rev 1 2024-02-21
snort ET TROJAN Lazarus Group Backdoor CnC Checkin M2 rev 1 2024-02-21
suricata ET MALWARE Lazarus Group Backdoor CnC Checkin M1 rev 1 2024-02-21
suricata ET MALWARE Lazarus Group Backdoor CnC Checkin M2 rev 1 2024-02-21
sigma ScreenConnect User Database Modification test 2024-02-21
sigma CVE-2024-1708 - ScreenConnect Path Traversal Exploitation test 2024-02-21
snort ET MOBILE_MALWARE Android Kamran Malware Related CnC Domain in DNS Lookup rev 1 2024-02-20
suricata ET MOBILE_MALWARE Android Kamran Malware Related CnC Domain in DNS Lookup rev 1 2024-02-20
sigma DPRK Threat Actor - C2 Communication DNS Indicators test 2024-02-20
sigma CVE-2024-1709 - ScreenConnect Authentication Bypass Exploitation test 2024-02-20
sigma CVE-2024-1708 - ScreenConnect Path Traversal Exploitation - Security test 2024-02-20
sigma ScreenConnect User Database Modification - Security test 2024-02-20
snort ET TROJAN TinyTurlaNG Turla APT GetTask Request rev 1 2024-02-16
snort ET TROJAN TinyTurlaNG Turla APT Initial Client Beacon rev 1 2024-02-16
suricata ET MALWARE TinyTurlaNG Turla APT Initial Client Beacon rev 1 2024-02-16
suricata ET MALWARE TinyTurlaNG Turla APT GetTask Request rev 1 2024-02-16
snort ET TROJAN BunnyLoader 3.0 Echo Checkin rev 1 2024-02-15
snort ET TROJAN BunnyLoader 3.0 Tasking Checkin rev 1 2024-02-15
snort ET WEB_CLIENT Possible Chrome WebEx Extension RCE Attempt rev 2 2024-02-15
snort ET TROJAN BunnyLoader 3.0 CID Checkin rev 1 2024-02-15
snort ET TROJAN BunnyLoader 3.0 Heartbeat Checkin rev 1 2024-02-15
snort ET TROJAN BunnyLoader 3.0 Heartbeat Response rev 1 2024-02-15
snort ET TROJAN BunnyLoader 3.0 Tasking Response rev 1 2024-02-15
snort ET TROJAN BunnyLoader 3.0 DBID Checkin rev 1 2024-02-15
suricata ET MALWARE BunnyLoader 3.0 DBID Checkin rev 1 2024-02-15
suricata ET MALWARE BunnyLoader 3.0 Initial Checkin rev 1 2024-02-15
suricata ET MALWARE BunnyLoader 3.0 Heartbeat Checkin rev 1 2024-02-15
suricata ET MALWARE BunnyLoader 3.0 Echo Checkin rev 1 2024-02-15
suricata ET MALWARE BunnyLoader 3.0 Tasking Checkin rev 1 2024-02-15
suricata ET MALWARE BunnyLoader 3.0 CID Checkin rev 1 2024-02-15
suricata ET MALWARE BunnyLoader 3.0 Tasking Response rev 1 2024-02-15
suricata ET MALWARE BunnyLoader 3.0 Heartbeat Response rev 1 2024-02-15
sigma PUA - Advanced IP/Port Scanner Update Check test 2024-02-15
sigma HackTool - CobaltStrike Malleable Profile Patterns - Proxy test 2024-02-15
sigma HackTool - BabyShark Agent Default URL Pattern test 2024-02-15
sigma APT User Agent test 2024-02-15
sigma Chafer Malware URL Pattern test 2024-02-15
snort ET TROJAN Possible PikaBot Java Loader CnC Checkin rev 1 2024-02-14
suricata ET MALWARE Possible PikaBot Java Loader CnC Checkin rev 1 2024-02-14
snort ET TROJAN PikaBot Java Loader CnC Checkin rev 1 2024-02-13