Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SERVER Likely Malicious Request for /proc/<pid>/cmdline rev 2 2022-12-01
sigma VMGuestLib DLL Sideload test 2022-12-01
sigma DLL Sideloading Of ShellChromeAPI.DLL test 2022-12-01
snort ET USER_AGENTS Microsoft Office Existence Discovery User-Agent rev 1 2022-11-30
snort ET INFO EXE - Served Attached HTTP rev 3 2022-11-30
snort ET CURRENT_EVENTS Successful Banco de la Repblica Oriental del Uruguay Phish 2022-11-30 rev 1 2022-11-30
suricata ET PHISHING Successful Banco de la Repblica Oriental del Uruguay Phish 2022-11-30 rev 1 2022-11-30
snort ET INFO Microsoft Powershell Banner Output - Decimal Encoded rev 1 2022-11-29
snort ET INFO Microsoft cmd.exe Banner Output - Decimal Encoded rev 1 2022-11-29
snort ET CURRENT_EVENTS Coinbase Credential Phish Landing Page 2022-11-29 rev 1 2022-11-29
suricata ET HUNTING Microsoft Powershell Banner Output - Decimal Encoded rev 1 2022-11-29
suricata ET HUNTING Microsoft cmd.exe Banner Output - Decimal Encoded rev 1 2022-11-29
suricata ET PHISHING Coinbase Credential Phish Landing Page 2022-11-29 rev 1 2022-11-29
sigma Invoke-Obfuscation COMPRESS OBFUSCATION - PowerShell test 2022-11-29
sigma Suspicious DNS Z Flag Bit Set test 2022-11-29
sigma Invoke-Obfuscation STDIN+ Launcher - Security test 2022-11-29
sigma Invoke-Obfuscation VAR+ Launcher - Security test 2022-11-29
sigma Invoke-Obfuscation COMPRESS OBFUSCATION - Security test 2022-11-29
sigma Invoke-Obfuscation RUNDLL LAUNCHER - Security test 2022-11-29
sigma Invoke-Obfuscation Via Stdin - Security test 2022-11-29
sigma Invoke-Obfuscation Via Use Clip - Security test 2022-11-29
sigma Invoke-Obfuscation Via Use MSHTA - Security test 2022-11-29
sigma Invoke-Obfuscation Via Use Rundll32 - Security test 2022-11-29
sigma Invoke-Obfuscation VAR++ LAUNCHER OBFUSCATION - Security test 2022-11-29
sigma Credential Dumping Tools Service Execution - Security test 2022-11-29
sigma PowerShell Scripts Installed as Services - Security test 2022-11-29
sigma Tap Driver Installation - Security test 2022-11-29
sigma WMI Persistence - Security test 2022-11-29
sigma Invoke-Obfuscation VAR++ LAUNCHER OBFUSCATION - System test 2022-11-29
sigma Invoke-Obfuscation STDIN+ Launcher - System test 2022-11-29
sigma Invoke-Obfuscation VAR+ Launcher - System test 2022-11-29
sigma Invoke-Obfuscation COMPRESS OBFUSCATION - System test 2022-11-29
sigma Invoke-Obfuscation RUNDLL LAUNCHER - System test 2022-11-29
sigma Invoke-Obfuscation Via Stdin - System test 2022-11-29
sigma Invoke-Obfuscation Via Use Clip - System test 2022-11-29
sigma Invoke-Obfuscation Via Use MSHTA - System test 2022-11-29
sigma Invoke-Obfuscation Via Use Rundll32 - System test 2022-11-29
sigma Credential Dumping Tools Service Execution - System test 2022-11-29
sigma Moriya Rootkit - System test 2022-11-29
sigma Advanced IP Scanner - File Event test 2022-11-29