Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Observed DNS Query to TA455 Domain rev 1 2022-06-07
sigma Phishing Pattern ISO in Archive test 2022-06-07
sigma AWS EC2 Startup Shell Script Change test 2022-06-07
snort ET TROJAN Earth Berberoka Domain in DNS Lookup rev 1 2022-06-06
snort ET TROJAN Transparent Tribe APT Related Backdoor Sending System Information rev 1 2022-06-06
snort ET WEB_CLIENT [TW] WEBDAV Requesting Startup Dir rev 1 2022-06-06
snort ET TROJAN Fodcha Bot CnC Checkin rev 3 2022-06-06
snort ET TROJAN Generic Stealer Config from Server rev 1 2022-06-06
snort ET TROJAN Generic Stealer Config Download Request rev 1 2022-06-06
suricata ET MALWARE Generic Stealer Config from Server rev 1 2022-06-06
suricata ET MALWARE Earth Berberoka Domain in DNS Lookup rev 1 2022-06-06
suricata ET MALWARE Fodcha Bot CnC Checkin rev 2 2022-06-06
suricata ET WEB_CLIENT [TW] WEBDAV Requesting Startup Dir rev 1 2022-06-06
suricata ET MALWARE Transparent Tribe APT Related Backdoor Sending System Information rev 1 2022-06-06
sigma Nohup Execution test 2022-06-06
sigma CVE-2021-44077 POC Default Dropped File test 2022-06-06
sigma Suspicious GPO Discovery With Get-GPO test 2022-06-04
snort ET TROJAN Win32/Darkme Trojan Checkin M1 rev 1 2022-06-03
snort ET CURRENT_EVENTS Generic Cryptowallet Credential Phish Landing Page 2022-06-03 rev 1 2022-06-03
snort ET TROJAN Win32/Darkme Trojan Checkin M2 rev 1 2022-06-03
snort ET TROJAN Polonium CreepyDrive Download Request rev 1 2022-06-03
snort ET CURRENT_EVENTS Successful Generic Cryptowallet Credential Phish 2022-05-12 rev 3 2022-06-03
suricata ET PHISHING Generic Cryptowallet Credential Phish Landing Page 2022-06-03 rev 1 2022-06-03
suricata ET PHISHING Successful Generic Cryptowallet Credential Phish 2022-05-12 rev 2 2022-06-03
suricata ET MALWARE Polonium CreepyDrive Download Request rev 1 2022-06-03
suricata ET MALWARE Win32/Darkme Trojan Checkin M2 rev 1 2022-06-03
suricata ET MALWARE Win32/Darkme Trojan Checkin M1 rev 1 2022-06-03
sigma Python Spawning Pretty TTY on Windows test 2022-06-03
sigma Atlassian Confluence CVE-2022-26134 test 2022-06-03
sigma Suspicious Java Children Processes test 2022-06-03
snort ET TROJAN TA399/SideWinder antibot script rev 1 2022-06-02
snort ET INFO Powershell Base64 Decode Command Inbound rev 1 2022-06-02
snort ET CURRENT_EVENTS Generic Credential Phish Landing Page 2022-06-02 rev 1 2022-06-02
snort ET INFO Possible Fake Edu Host On InfinityFree Service rev 1 2022-06-02
suricata ET MALWARE TA399/SideWinder antibot script rev 1 2022-06-02
suricata ET HUNTING Possible Fake Edu Host On InfinityFree Service rev 1 2022-06-02
sigma Application URI Configuration Changes test 2022-06-02
sigma Application AppID Uri Configuration Changes test 2022-06-02
sigma Added Owner To Application test 2022-06-02
sigma Suspicious Desktopimgdownldr Target File test 2022-06-02