Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
sigma System Network Discovery - Linux test 2022-09-15
sigma Print History File Contents test 2022-09-15
sigma History File Deletion test 2022-09-15
sigma Remove Scheduled Cron Task/Job test 2022-09-15
sigma Curl Usage on Linux test 2022-09-15
sigma Suspicious Curl Change User Agents - Linux test 2022-09-15
sigma File Deletion stable 2022-09-15
snort ET TROJAN Powershell/PowHeartBeat CnC Checkin - HTTPS rev 1 2022-09-14
snort ET SCAN MS Terminal Server Traffic on Non-standard Port rev 3 2022-09-14
snort ET CURRENT_EVENTS Successful Generic Credential Phish 2022-09-14 rev 1 2022-09-14
snort ET MALWARE Win32/SuperDiag PUP CnC Activity rev 1 2022-09-14
snort ET CURRENT_EVENTS Generic Credential Phish Landing Page 2022-09-14 rev 1 2022-09-14
suricata ET MALWARE Powershell/PowHeartBeat CnC Checkin - HTTPS rev 1 2022-09-14
suricata ET PHISHING Generic Credential Phish Landing Page 2022-09-14 rev 1 2022-09-14
sigma Suspicious Usage Of Active Directory Diagnostic Tool (ntdsutil.exe) test 2022-09-14
snort ET POLICY Suspicious Windows Installer UA for non-MSI rev 2 2022-09-13
snort ET TROJAN Powershell/PowHeartBeat CnC Checkin - ICMP rev 1 2022-09-13
suricata ET MALWARE Powershell/PowHeartBeat CnC Checkin - ICMP rev 1 2022-09-13
elastic Web Application Suspicious Activity: No User Agent deprecated 2022-09-13
sigma Recon Information for Export with Command Prompt test 2022-09-13
sigma Taskkill Symantec Endpoint Protection test 2022-09-13
sigma Disable-WindowsOptionalFeature Command PowerShell test 2022-09-10
snort ET MALWARE Win32/Adware.InstallCommerce.A CnC Checkin rev 1 2022-09-09
snort ET TROJAN Win32/MagicRAT CnC Activity M1 rev 2 2022-09-09
snort ET INFO Go-http-client POSTing IP Address and Username rev 1 2022-09-09
snort ET TROJAN Win32/MagicRAT CnC Activity M2 rev 1 2022-09-09
snort ET TROJAN Win64/Spy.Agent.EU CnC Checkin rev 1 2022-09-09
suricata ET MALWARE Win64/Spy.Agent.EU CnC Checkin rev 1 2022-09-09
suricata ET ADWARE_PUP Win32/Adware.InstallCommerce.A CnC Checkin rev 1 2022-09-09
sigma Suspicious Schtasks Schedule Types test 2022-09-09
sigma Email Exifiltration Via Powershell test 2022-09-09
sigma Delete All Scheduled Tasks test 2022-09-09
sigma User Added to Remote Desktop Users Group test 2022-09-09
sigma Suspicious Reg Add BitLocker test 2022-09-09
sigma Hermetic Wiper TG Process Patterns test 2022-09-09
snort ET TROJAN Win32/Zegost!ml CnC Checkin rev 1 2022-09-08
snort ET CURRENT_EVENTS Successful BECU Phish 2022-09-08 rev 1 2022-09-08
suricata ET PHISHING Successful BECU Phish 2022-09-08 rev 1 2022-09-08
sigma Suspicious Process Parents test 2022-09-08
snort ET TROJAN ErbiumStealer Response From CnC rev 1 2022-09-06