Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET HUNTING HTTP GET Request XOR Key ee rev 2 2022-08-10
suricata ET HUNTING HTTP POST Request XOR Key cd rev 2 2022-08-10
suricata ET HUNTING HTTP POST Request XOR Key 09 rev 2 2022-08-10
suricata ET HUNTING HTTP POST Request XOR Key d1 rev 2 2022-08-10
suricata ET HUNTING HTTP POST Request XOR Key ae rev 2 2022-08-10
suricata ET HUNTING HTTP GET Request XOR Key 3f rev 2 2022-08-10
suricata ET HUNTING HTTP GET Request XOR Key ab rev 2 2022-08-10
suricata ET HUNTING HTTP POST Request XOR Key e6 rev 2 2022-08-10
suricata ET HUNTING HTTP GET Request XOR Key 08 rev 2 2022-08-10
suricata ET HUNTING HTTP POST Request XOR Key 07 rev 2 2022-08-10
suricata ET HUNTING HTTP POST Request XOR Key 39 rev 2 2022-08-10
suricata ET HUNTING HTTP GET Request XOR Key eb rev 2 2022-08-10
suricata ET HUNTING HTTP POST Request XOR Key 53 rev 2 2022-08-10
suricata ET HUNTING HTTP POST Request XOR Key 8f rev 2 2022-08-10
suricata ET HUNTING HTTP GET Request XOR Key 5d rev 2 2022-08-10
suricata ET HUNTING HTTP POST Request XOR Key 71 rev 2 2022-08-10
suricata ET HUNTING HTTP GET Request XOR Key 79 rev 2 2022-08-10
suricata ET HUNTING HTTP GET Request XOR Key c9 rev 2 2022-08-10
sigma Temporary Access Pass Added To An Account test 2022-08-10
sigma Guest User Invited By Non Approved Inviters test 2022-08-10
sigma Bpfdoor TCP Ports Redirect test 2022-08-10
snort ET TROJAN Win32/ErbiumStealer Panel CnC Checkin rev 1 2022-08-09
snort ET TROJAN Netwire RAT Check-in rev 6 2022-08-09
snort ET INFO HTTP GET Request XOR e4 rev 1 2022-08-09
snort ET USER_AGENTS ErbiumStealer UA Observed rev 1 2022-08-09
suricata ET MALWARE Win32/ErbiumStealer Panel CnC Checkin rev 1 2022-08-09
suricata ET HUNTING HTTP GET Request XOR e4 rev 1 2022-08-09
sigma PIM Approvals And Deny Elevation test 2022-08-09
sigma Changes To PIM Settings test 2022-08-09
sigma PIM Alert Setting Changes To Disabled test 2022-08-09
snort ET TROJAN ELF/RapperBot CnC Checkin M1 rev 1 2022-08-08
snort ET TROJAN ELF/RapperBot CnC Checkin M2 rev 1 2022-08-08
suricata ET MALWARE ELF/RapperBot CnC Checkin M2 rev 1 2022-08-08
suricata ET MALWARE ELF/RapperBot CnC Checkin M1 rev 1 2022-08-08
suricata ET JA3 Hash - DeimosC2 Agent Activity rev 1 2022-08-08
sigma Service DACL Abuse To Hide Services Via Sc.EXE test 2022-08-08
sigma Flash Player Update from Suspicious Location test 2022-08-08
sigma Suspicious Debugger Registration Cmdline test 2022-08-06
sigma User Added To Privilege Role test 2022-08-06
sigma Tamper Windows Defender Remove-MpPreference test 2022-08-05