Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
sigma Suspicious Scheduled Task Creation Involving Temp Folder test 2022-10-09
sigma Execute From Alternate Data Streams test 2022-10-09
sigma Raccine Uninstall test 2022-10-09
sigma Suspicious File Characteristics Due to Missing Fields test 2022-10-09
sigma Suspicious Service Binary Directory test 2022-10-09
sigma Malicious PE Execution by Microsoft Visual Studio Debugger test 2022-10-09
sigma Blue Mockingbird test 2022-10-09
sigma Remote PowerShell Session Host Process (WinRM) test 2022-10-09
sigma MSSQL Extended Stored Procedure Backdoor Maggie test 2022-10-09
sigma Suspicious Camera and Microphone Access test 2022-10-09
sigma Suspicious Encoded Scripts in a WMI Consumer test 2022-10-09
sigma UNC2452 PowerShell Pattern test 2022-10-09
sigma Suspicious VBScript UN2452 Pattern test 2022-10-09
sigma CVE-2021-1675 Print Spooler Exploitation test 2022-10-09
sigma PsExec Default Named Pipe test 2022-10-09
sigma Turla Group Lateral Movement test 2022-10-09
sigma Operation Wocao Activity test 2022-10-09
sigma AWL Bypass with Winrm.vbs and Malicious WsmPty.xsl/WsmTxt.xsl test 2022-10-09
sigma Microsoft 365 - Potential Ransomware Activity test 2022-10-09
sigma Logon from a Risky IP Address test 2022-10-09
sigma Code Injection by ld.so Preload test 2022-10-09
sigma AWS EFS Fileshare Modified or Deleted test 2022-10-09
sigma AWS EFS Fileshare Mount Modified or Deleted test 2022-10-09
sigma Suspicious Inbox Forwarding test 2022-10-09
sigma AWS CloudTrail Important Change test 2022-10-09
sigma AWS Route 53 Domain Transfer Lock Disabled test 2022-10-09
sigma Activity from Infrequent Country test 2022-10-09
sigma Google Cloud Storage Buckets Modified or Deleted test 2022-10-09
sigma Activity Performed by Terminated User test 2022-10-09
sigma AWS GuardDuty Important Change test 2022-10-09
sigma Suspicious OAuth App File Download Activities test 2022-10-09
sigma Clipboard Collection of Image Data with Xclip Tool test 2022-10-09
sigma Azure Device or Configuration Modified or Deleted test 2022-10-09
sigma Microsoft 365 - User Restricted from Sending Email test 2022-10-09
sigma Google Cloud VPN Tunnel Modified or Deleted test 2022-10-09
sigma Steganography Hide Files with Steghide test 2022-10-09
sigma Screen Capture with Import Tool test 2022-10-09
sigma Restore Public AWS RDS Instance test 2022-10-09
sigma Microsoft 365 - Unusual Volume of File Deletion test 2022-10-09
sigma AWS Root Credentials test 2022-10-09