Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
sigma Process Execution Error In JVM Based Application test 2023-02-11
sigma Potential Server Side Template Injection In Velocity test 2023-02-11
sigma Potential SpEL Injection In Spring Framework test 2023-02-11
sigma Potential JNDI Injection Exploitation In JVM Based Application test 2023-02-11
sigma Potential RCE Exploitation Attempt In NodeJS test 2023-02-11
sigma Potential Local File Read Vulnerability In JVM Based Application test 2023-02-11
sigma Potential XXE Exploitation Attempt In JVM Based Application test 2023-02-11
sigma Potential OGNL Injection Exploitation In JVM Based Application test 2023-02-11
sigma HackTool - Koadic Execution test 2023-02-11
sigma VBA DLL Loaded Via Office Application test 2023-02-10
sigma Hidden Executable In NTFS Alternate Data Stream test 2023-02-10
sigma Unusual File Download from Direct IP Address test 2023-02-10
sigma GAC DLL Loaded Via Office Applications test 2023-02-10
sigma Potential Persistence Via Microsoft Compatibility Appraiser test 2023-02-10
sigma Suspicious Microsoft OneNote Child Process test 2023-02-10
sigma New Firewall Rule Added Via Netsh.EXE test 2023-02-10
snort ET GAMES Multiple Game Cheat Application Activity rev 1 2023-02-09
snort ET TROJAN UAC-0114/Winter Vivern Redirect rev 1 2023-02-09
snort ET GAMES Multiple Game Cheat Application Activity rev 1 2023-02-09
suricata ET MALWARE UAC-0114/Winter Vivern Redirect rev 1 2023-02-09
sigma Outlook EnableUnsafeClientMailRules Setting Enabled test 2023-02-09
sigma Code Execution via Pcwutl.dll test 2023-02-09
sigma Shell32 DLL Execution in Suspicious Directory test 2023-02-09
sigma Suspicious Control Panel DLL Load test 2023-02-09
sigma Suspicious Remote Child Process From Outlook test 2023-02-09
sigma Rundll32 InstallScreenSaver Execution test 2023-02-09
sigma Suspicious Key Manager Access test 2023-02-09
sigma Suspicious NTLM Authentication on the Printer Spooler Service test 2023-02-09
sigma Rundll32 Registered COM Objects test 2023-02-09
sigma Suspicious Workstation Locking via Rundll32 test 2023-02-09
sigma Terminal Server Client Connection History Cleared - Registry test 2023-02-08
sigma Folder Removed From Exploit Guard ProtectedFolders List - Registry test 2023-02-08
sigma PUA - Netcat Suspicious Execution test 2023-02-08
sigma Publisher Attachment File Dropped In Suspicious Location test 2023-02-08
sigma WMI Backdoor Exchange Transport Agent test 2023-02-08
sigma New Outlook Macro Created test 2023-02-08
sigma HackTool - XORDump Execution test 2023-02-08
sigma Suspicious Reconnaissance Activity Via GatherNetworkInfo.VBS test 2023-02-08
sigma Potential Persistence Via Microsoft Office Add-In test 2023-02-08
sigma Suspicious Registry Modification From ADS Via Regini.EXE test 2023-02-08