Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN DCRat Initial Checkin Server Response M5 rev 2 2023-04-04
snort ET CURRENT_EVENTS Successful Telstra Credential Phish 2022-08-26 rev 2 2023-04-04
snort ET CURRENT_EVENTS [TW] EvilProxy AiTM Microsoft HTTP HOST M1 rev 2 2023-04-04
snort ET TROJAN Win32/RisePro CnC Server Response M3 rev 2 2023-04-04
snort ET TROJAN Go/Hack Browser Data Exfil Attempt rev 3 2023-04-04
snort ET CURRENT_EVENTS [TW] EvilProxy AiTM Microsoft HTTP HOST M9 rev 2 2023-04-04
snort ET CURRENT_EVENTS [TW] EvilProxy AiTM Microsoft HTTP HOST M2 rev 2 2023-04-04
snort ET CURRENT_EVENTS [TW] EvilProxy AiTM Microsoft HTTP HOST M10 rev 2 2023-04-04
snort ET CURRENT_EVENTS Successful Generic Credential Phish 2022-10-26 rev 2 2023-04-04
snort ET TROJAN APT-Q-37/Manling Flower Payload - CnC Checkin rev 2 2023-04-04
snort ET TROJAN Win32/Small.NO Checkin rev 2 2023-04-04
snort ET TROJAN Win32/WarHawk Checkin Activity rev 2 2023-04-04
snort ET TROJAN Linux DarkRadiation Ransomware Telegram Activity M1 rev 2 2023-04-04
snort ET TROJAN MSIL/Agent.CTK Checkin rev 2 2023-04-04
snort ET TROJAN Hyperion Obfuscator Payload Inbound rev 2 2023-04-04
snort ET CURRENT_EVENTS [TW] EvilProxy AiTM Microsoft HTTP HOST M6 rev 2 2023-04-04
snort ET TROJAN Win32/Vidar Variant/Mars Stealer Resources Download rev 2 2023-04-04
snort ET TROJAN DarkCrystal Rat Stealer Data Exfiltration Activity rev 2 2023-04-04
snort ET TROJAN Win32/RisePro CnC Server Response M3 rev 2 2023-04-04
snort ET TROJAN Fake Browser Update via Error Page Web Inject rev 1 2023-04-04
snort ET TROJAN Win32/RisePro CnC Server Response M5 rev 2 2023-04-04
snort ET CURRENT_EVENTS [TW] EvilProxy AiTM Microsoft HTTP HOST M7 rev 2 2023-04-04
snort ET TROJAN Possible Kimsuky Related Malicious VBScript rev 3 2023-04-04
snort ET TROJAN Win32/Unk.HRESQ! MultiDownloader Checkin M2 rev 2 2023-04-04
snort ET CURRENT_EVENTS Successful Generic Credential Phish 2022-10-26 rev 2 2023-04-04
snort ET CURRENT_EVENTS [TW] EvilProxy AiTM Microsoft HTTP HOST M4 rev 2 2023-04-04
snort ET CURRENT_EVENTS Successful Generic Phish 2022-07-29 rev 2 2023-04-04
snort ET CURRENT_EVENTS Successful Generic Credential Phish 2022-10-26 rev 2 2023-04-04
snort ET TROJAN Manjusaka C2 Client Heartbeat rev 2 2023-04-04
snort ET CURRENT_EVENTS Successful Generic Phish 2022-03-28 rev 3 2023-04-04
snort ET TROJAN Fake Browser Update via Error Page Loader rev 1 2023-04-04
snort ET CURRENT_EVENTS Successful Microsoft Outlook Credential Phish 2022-10-03 rev 2 2023-04-04
snort ET CURRENT_EVENTS Successful Trust Wallet Phish 2022-10-11 rev 2 2023-04-04
snort ET TROJAN Win32/RisePro CnC Server Response M1 rev 2 2023-04-04
snort ET CURRENT_EVENTS Successful Office 365 Phish 2022-07-19 rev 2 2023-04-04
snort ET CURRENT_EVENTS Successful OWA Phish 2022-07-15 rev 2 2023-04-04
snort ET CURRENT_EVENTS Successful Navy Federal Phish 2022-10-11 rev 2 2023-04-04
snort ET TROJAN Win32/Agent.RDE Checkin rev 2 2023-04-04
snort ET TROJAN Win32/RisePro CnC Server Response M2 rev 2 2023-04-04
snort ET TROJAN SideCopy APT Related CnC Response rev 2 2023-04-04