Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
sigma CVE-2021-31979 CVE-2021-33771 Exploits by Sourgum test 2022-10-09
sigma CVE-2021-26858 Exchange Exploitation test 2022-10-09
sigma Remote PowerShell Session Host Process (WinRM) test 2022-10-09
sigma AWL Bypass with Winrm.vbs and Malicious WsmPty.xsl/WsmTxt.xsl test 2022-10-09
sigma Folder Compress To Potentially Suspicious Output Via Compress-Archive Cmdlet test 2022-10-09
sigma Suspicious VBScript UN2452 Pattern test 2022-10-09
sigma Malicious PE Execution by Microsoft Visual Studio Debugger test 2022-10-09
sigma UNC2452 PowerShell Pattern test 2022-10-09
sigma Blue Mockingbird test 2022-10-09
sigma Suspicious Service Binary Directory test 2022-10-09
sigma MSExchange Transport Agent Installation test 2022-10-09
sigma Detected Windows Software Discovery test 2022-10-09
sigma Defrag Deactivation test 2022-10-09
sigma Execute From Alternate Data Streams test 2022-10-09
sigma Pandemic Registry Key test 2022-10-09
sigma Adwind RAT / JRAT test 2022-10-09
sigma CosmicDuke Service Installation test 2022-10-09
sigma Activity from Infrequent Country test 2022-10-09
sigma Data Exfiltration to Unsanctioned Apps test 2022-10-09
sigma AWS EKS Cluster Created or Deleted test 2022-10-09
sigma AWS ElastiCache Security Group Created test 2022-10-09
sigma Google Cloud Kubernetes RoleBinding test 2022-10-09
sigma AWS ElastiCache Security Group Modified or Deleted test 2022-10-09
sigma Google Cloud Kubernetes Secrets Modified or Deleted test 2022-10-09
sigma Restore Public AWS RDS Instance test 2022-10-09
sigma AWS Root Credentials test 2022-10-09
sigma AWS Route 53 Domain Transfer Lock Disabled test 2022-10-09
sigma Google Cloud Service Account Disabled or Deleted test 2022-10-09
sigma Google Cloud Service Account Modified test 2022-10-09
sigma Steganography Hide Files with Steghide test 2022-10-09
sigma Screen Capture with Import Tool test 2022-10-09
sigma Activity Performed by Terminated User test 2022-10-09
sigma Activity from Anonymous IP Addresses test 2022-10-09
sigma AWS CloudTrail Important Change test 2022-10-09
sigma Shellshock Expression test 2022-10-09
sigma Google Cloud Storage Buckets Enumeration test 2022-10-09
sigma Google Cloud Storage Buckets Modified or Deleted test 2022-10-09
sigma AWS S3 Data Management Tampering test 2022-10-09
sigma AWS Route 53 Domain Transferred to Another Account test 2022-10-09
sigma AWS GuardDuty Important Change test 2022-10-09