Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN CopperStealer - Remote Desktop - CnC Server Request via Pastebin rev 1 2022-06-17
snort ET TROJAN CopperStealer - Remote Desktop - CnC Server Response via Pastebin rev 1 2022-06-17
snort ET CURRENT_EVENTS GCash Credential Phish Landing Page 2022-06-17 rev 1 2022-06-17
snort ET CURRENT_EVENTS GCash Credential Phish 2022-06-17 rev 1 2022-06-17
snort ET TROJAN CopperStealer - Remote Desktop - Task Request rev 1 2022-06-17
snort ET TROJAN CopperStealer - Browser Stealer Exfil via Telegram rev 1 2022-06-17
suricata ET MALWARE CopperStealer - Remote Desktop - CnC Server Response via Pastebin rev 1 2022-06-17
suricata ET MALWARE System Information Being Sent in User-Agent rev 1 2022-06-17
suricata ET MALWARE CopperStealer - Remote Desktop - Task Request rev 1 2022-06-17
suricata ET MALWARE CopperStealer - Remote Desktop - CnC Server Request via Pastebin rev 1 2022-06-17
suricata ET PHISHING GCash Credential Phish Landing Page 2022-06-17 rev 1 2022-06-17
sigma Account Disabled or Blocked for Sign in Attempts test 2022-06-17
sigma Use of Legacy Authentication Protocols test 2022-06-17
sigma DumpStack.log Defender Evasion test 2022-06-17
snort ET TROJAN Win32/MassLogger FTP Data Exfiltration rev 1 2022-06-16
snort ET CURRENT_EVENTS Possible Crypto Drainer Fetch rev 1 2022-06-16
snort ET CURRENT_EVENTS Possible Crypto Drainer Enumerate rev 1 2022-06-16
snort ET TROJAN Win32.Zegost CnC Checkin rev 1 2022-06-16
suricata ET MALWARE Win32.Zegost CnC Checkin rev 1 2022-06-16
suricata ET MALWARE Win32/MassLogger FTP Data Exfiltration rev 1 2022-06-16
sigma Use of OpenConsole test 2022-06-16
snort ET TROJAN Win32/Tiggre!rfn Zipped Exfil rev 1 2022-06-15
snort ET TROJAN Suspected Cobalt Strike Beacon User-Agent String rev 1 2022-06-15
suricata ET MALWARE Win32/Tiggre!rfn Zipped Exfil rev 1 2022-06-15
suricata ET MALWARE Suspected Cobalt Strike Beacon User-Agent String rev 1 2022-06-15
sigma Conhost.exe CommandLine Path Traversal test 2022-06-14
sigma Cross Site Scripting Strings test 2022-06-14
sigma Server Side Template Injection Strings test 2022-06-14
snort ET TROJAN MegalodonHTTP/LuciferHTTP/Gomorrah Client Action M2 rev 1 2022-06-13
snort ET CURRENT_EVENTS Successful Generic Credential Phish 2022-06-14 rev 1 2022-06-13
snort ET CURRENT_EVENTS Generic Credential Phish Landing Page 2022-06-13 rev 1 2022-06-13
snort ET CURRENT_EVENTS Successful Generic Credential Phish 2022-06-13 rev 1 2022-06-13
suricata ET PHISHING Generic Credential Phish Landing Page 2022-06-13 rev 1 2022-06-13
suricata ET PHISHING Successful Generic Credential Phish 2022-06-14 rev 1 2022-06-13
suricata ET PHISHING Successful Generic Credential Phish 2022-06-13 rev 1 2022-06-13
sigma Execute Pcwrun.EXE To Leverage Follina test 2022-06-13
snort ET TROJAN Win32.Agent.kawe SMTP Stealer rev 1 2022-06-10
snort ET INFO Possible Generic Stealer Sending a Screenshot rev 3 2022-06-10
snort ET INFO Possible Generic Stealer Sending System Information rev 3 2022-06-10
snort ET ATTACK_RESPONSE Obfuscated JS - URL Encoded Unescape Function Call Inbound rev 3 2022-06-10