Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Suspected Bitter APT Related Activity rev 1 2022-11-16
snort ET TROJAN Win32/VB.PNU CnC Checkin rev 1 2022-11-16
snort ET INFO GameHouse License Check rev 1 2022-11-16
suricata ET MALWARE Suspected Bitter APT Related Activity rev 1 2022-11-16
sigma Invoke-Obfuscation VAR++ LAUNCHER OBFUSCATION test 2022-11-16
snort ET INFO Trend Micro Phishing Simulation Service rev 1 2022-11-15
snort ET TROJAN Fodcha Botnet Style DNS Server Lookup rev 1 2022-11-15
suricata ET INFO Trend Micro Phishing Simulation Service rev 1 2022-11-15
sigma Possible CVE-2021-1675 Print Spooler Exploitation test 2022-11-15
snort ET CURRENT_EVENTS Successful GNCU Credential Phish 2022-11-14 rev 1 2022-11-14
suricata ET PHISHING Successful GNCU Credential Phish 2022-11-14 rev 1 2022-11-14
sigma Abused Debug Privilege by Arbitrary Parent Processes test 2022-11-11
sigma Automated Collection Command Prompt test 2022-11-11
sigma Suspicious RunAs-Like Flag Combination test 2022-11-11
sigma Suspicious Process Patterns NTDS.DIT Exfil test 2022-11-10
sigma Shadow Copies Creation Using Operating Systems Utilities test 2022-11-10
sigma Use Of The SFTP.EXE Binary As A LOLBIN test 2022-11-10
snort ET TROJAN VBA/Agent.ADT Checkin rev 1 2022-11-09
snort ET TROJAN JS/Cloud9 Cookie Exfiltration Attempt rev 1 2022-11-09
snort ET TROJAN JS/Cloud9 Clipboard Exfiltration Attempt rev 1 2022-11-09
suricata ET MALWARE JS/Cloud9 Cookie Exfiltration Attempt rev 1 2022-11-09
suricata ET MALWARE JS/Cloud9 Clipboard Exfiltration Attempt rev 1 2022-11-09
sigma AMSI Bypass Pattern Assembly GetType test 2022-11-09
snort ET CURRENT_EVENTS Successful Veridian Credit Union Credential Phish 2022-11-08 rev 1 2022-11-08
snort ET CURRENT_EVENTS Successful Roundcube Credential Phish 2022-11-08 rev 1 2022-11-08
suricata ET PHISHING Successful Veridian Credit Union Credential Phish 2022-11-08 rev 1 2022-11-08
suricata ET PHISHING Successful Roundcube Credential Phish 2022-11-08 rev 1 2022-11-08
sigma Potential AD User Enumeration From Non-Machine Account test 2022-11-08
sigma Suspicious Screensaver Binary File Creation test 2022-11-08
snort ET TROJAN ChromeLoader CnC Checkin M1 rev 1 2022-11-07
snort ET MALWARE ChromeLoader CnC Error rev 1 2022-11-07
snort ET TROJAN ChromeLoader CnC Checkin M2 rev 1 2022-11-07
suricata ET MALWARE ChromeLoader CnC Checkin M2 rev 1 2022-11-07
suricata ET MALWARE ChromeLoader CnC Checkin M1 rev 1 2022-11-07
suricata ET MALWARE ChromeLoader CnC Error rev 1 2022-11-07
snort ET CURRENT_EVENTS Successful Nordea Netbank Credential Phish 2022-11-04 rev 1 2022-11-04
snort ET CURRENT_EVENTS Twitter Credential Phish Landing Page 2022-11-04 rev 1 2022-11-04
snort ET TROJAN Win32/DataStealer.P CnC Checkin rev 1 2022-11-04
snort ET ATTACK_RESPONSE Possible PowerShell AMSI Bypass Inbound rev 1 2022-11-04
snort ET TROJAN Win32/Delf.UUW CnC Keep-Alive rev 1 2022-11-04