Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
sigma VMware vCenter Server File Upload CVE-2021-22005 test 2023-01-02
sigma Fortinet CVE-2021-22123 Exploitation test 2023-01-02
sigma Pulse Connect Secure RCE Attack CVE-2021-22893 stable 2023-01-02
sigma CVE-2021-33766 Exchange ProxyToken Exploitation test 2023-01-02
sigma ADSelfService Exploitation test 2023-01-02
sigma CVE-2021-40539 Zoho ManageEngine ADSelfService Plus Exploit test 2023-01-02
sigma Sitecore Pre-Auth RCE CVE-2021-42237 test 2023-01-02
sigma Grafana Path Traversal Exploitation CVE-2021-43798 test 2023-01-02
sigma Zimbra Collaboration Suite Email Server Unauthenticated RCE test 2023-01-02
sigma CVE-2022-31656 VMware Workspace ONE Access Auth Bypass test 2023-01-02
sigma CVE-2022-31659 VMware Workspace ONE Access RCE test 2023-01-02
sigma Apache Spark Shell Command Injection - Weblogs test 2023-01-02
sigma Atlassian Bitbucket Command Injection Via Archive API test 2023-01-02
sigma Potential OWASSRF Exploitation Attempt - Webserver test 2023-01-02
sigma OWASSRF Exploitation Attempt Using Public POC - Webserver test 2023-01-02
sigma Potential CVE-2022-46169 Exploitation Attempt test 2023-01-02
sigma CVE-2020-10148 SolarWinds Orion API Auth Bypass test 2023-01-02
sigma Exchange ProxyShell Pattern test 2023-01-02
sigma Successful Exchange ProxyShell Attack test 2023-01-02
sigma Oracle WebLogic Exploit test 2023-01-02
sigma TerraMaster TOS CVE-2020-28188 test 2023-01-02
sigma CVE-2020-5902 F5 BIG-IP Exploitation Attempt test 2023-01-02
sigma Oracle WebLogic Exploit CVE-2020-14882 test 2023-01-02
sigma Fortinet CVE-2018-13379 Exploitation test 2023-01-02
sigma DEWMODE Webshell Access test 2023-01-02
sigma Exchange Exploitation Used by HAFNIUM test 2023-01-02
sigma Cisco ASA FTD Exploit CVE-2020-3452 test 2023-01-02
sigma Exchange Exploitation CVE-2021-28480 test 2023-01-02
sigma Solarwinds SUPERNOVA Webshell Access test 2023-01-02
sigma Citrix ADS Exploitation CVE-2020-8193 CVE-2020-8195 test 2023-01-02
sigma Invoke-Obfuscation Obfuscated IEX Invocation - PowerShell test 2022-12-31
sigma Invoke-Obfuscation Obfuscated IEX Invocation - PowerShell Module test 2022-12-31
sigma Potential DLL Sideloading Using Coregen.exe test 2022-12-31
sigma Suspicious Diantz Alternate Data Stream Execution test 2022-12-31
sigma Linux Doas Conf File Creation stable 2022-12-31
sigma Triple Cross eBPF Rootkit Default Persistence test 2022-12-31
sigma Triple Cross eBPF Rootkit Default LockFile test 2022-12-31
snort ET TROJAN TA444 Related CnC Payload Request rev 1 2022-12-30
snort ET TROJAN ViperSoftX HTTP CnC Activity rev 1 2022-12-30
suricata ET MALWARE ViperSoftX HTTP CnC Activity rev 1 2022-12-30