Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CURRENT_EVENTS Successful OWA Phish 2022-07-11 rev 1 2022-07-11
suricata ET MALWARE HiveRAT CnC Activity M2 rev 1 2022-07-11
sigma SCM Database Handle Failure test 2022-07-11
sigma Powershell Keylogging test 2022-07-11
sigma Suspicious Csi.exe Usage test 2022-07-11
sigma Suspicious Runscripthelper.exe test 2022-07-11
sigma Net.EXE Execution test 2022-07-11
sigma App Granted Microsoft Permissions test 2022-07-10
sigma End User Consent Blocked test 2022-07-10
snort ET CURRENT_EVENTS Successful Generic Credential Phish 2022-07-08 rev 1 2022-07-08
snort ET TROJAN MSIL/PSW.Agent.RXP Checkin rev 1 2022-07-08
snort ET TROJAN TontoTeam APT Related Bisonal CnC Activity rev 1 2022-07-08
snort ET CURRENT_EVENTS Successful Adobe Credential Phish 2022-07-08 rev 1 2022-07-08
snort ET TROJAN MSIL/Spy.Agent.DYS Exfil rev 1 2022-07-08
snort ET TROJAN MSIL/Spy.Agent.AES Zipped Exfil rev 1 2022-07-08
suricata ET MALWARE MSIL/PSW.Agent.RXP Checkin rev 1 2022-07-08
suricata ET MALWARE MSIL/Spy.Agent.AES Zipped Exfil rev 1 2022-07-08
suricata ET PHISHING Successful Generic Credential Phish 2022-07-08 rev 1 2022-07-08
suricata ET MALWARE MSIL/Spy.Agent.DYS Exfil rev 1 2022-07-08
suricata ET PHISHING Successful Adobe Credential Phish 2022-07-08 rev 1 2022-07-08
sigma Suspicious TCP Tunnel Via PowerShell Script test 2022-07-08
snort ET CURRENT_EVENTS Successful Orange Credential Phish 2022-07-07 rev 1 2022-07-07
suricata ET PHISHING Successful Orange Credential Phish 2022-07-07 rev 1 2022-07-07
sigma Hack Tool User Agent test 2022-07-07
sigma Winlogon Helper DLL test 2022-07-07
sigma Potential Register_App.Vbs LOLScript Abuse test 2022-07-07
sigma Windows Screen Capture with CopyFromScreen test 2022-07-07
sigma Abusing Print Executable test 2022-07-07
sigma Scheduled Task/Job At stable 2022-07-07
sigma DD File Overwrite test 2022-07-07
sigma Process Discovery stable 2022-07-07
sigma DNS Events Related To Mining Pools test 2022-07-07
snort ET CURRENT_EVENTS Australian Government Credential Phish Landing Page 2022-07-06 rev 1 2022-07-06
snort ET CURRENT_EVENTS Successful Australian Government Credential Phish 2022-07-06 rev 1 2022-07-06
suricata ET PHISHING Successful Australian Government Credential Phish 2022-07-06 rev 1 2022-07-06
suricata ET PHISHING Australian Government Credential Phish Landing Page 2022-07-06 rev 1 2022-07-06
snort ET CURRENT_EVENTS Radobank Phishing Landing Page 2022-07-05 rev 1 2022-07-05
snort ET CURRENT_EVENTS Successful Caixa Credential Phish 2022-07-05 rev 1 2022-07-05
snort ET CURRENT_EVENTS Navy Federal Credit Union Credential Phish Landing Page 2022-07-05 rev 1 2022-07-05
snort ET CURRENT_EVENTS Spox Phish Kit Landing Page 2022-07-05 rev 1 2022-07-05