Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING IRS Credential Phish Credit Card Payment Data Exfil rev 3 2022-04-18
suricata ET WEB_SERVER Possible Oracle SQL Injection utl_inaddr call in URI rev 5 2022-04-18
suricata ET MALWARE MSIL/Crimson Rat CnC Server Response rev 2 2022-04-18
suricata ET MALWARE MSIL/Crimson Rat CnC Exfil rev 2 2022-04-18
suricata ET MALWARE Win32/Numando Banker CnC Activity rev 2 2022-04-18
suricata ET PHISHING Successful Metawallet Phish 2022-01-13 rev 3 2022-04-18
suricata ET PHISHING Paypal Phishing Landing Jun 28 2017 rev 5 2022-04-18
suricata GPL NETBIOS DCERPC CoGetInstanceFromFile little endian overflow attempt rev 8 2022-04-18
sigma Modifying Crontab test 2022-04-16
snort ET POLICY [TW] IPFS Protocol HTTP Headers Observed rev 2 2022-04-15
snort ET INFO Empty POST with Terse Headers Over Non Standard Port rev 2 2022-04-15
snort ET POLICY [TW] IPFS File Request Observed rev 1 2022-04-15
suricata ET INFO [TW] IPFS File Request Observed rev 1 2022-04-15
snort ET INFO DYNAMIC_DNS Query to a *.yourtrap .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.dns2 .us Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.authorizeddns .net Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.fartit .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.toythieves .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.youdontcare .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.myftp .info Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.onedumb .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.2waky .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.wikaba .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.dnsfailover .net Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.serveuser .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.mymom .info Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.dhcp .biz Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.ftpserver .biz Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.dubya .info Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.zyns .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.squirly .info Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.wwwhost .us Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.onmypc .net Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.dsmtp .biz Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.dsmtp .biz Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.freewww .info Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.www1 .biz Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS HTTP Request to a *.mydad .info Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.youdontcare .com Domain rev 2 2022-04-14
snort ET INFO DYNAMIC_DNS Query to a *.onmypc .us Domain rev 2 2022-04-14