Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Standard Bank Login Phish 2022-02-04 rev 2 2022-02-07
sigma Network Reconnaissance Activity test 2022-02-07
sigma Suspicious Get-ADReplAccount test 2022-02-06
sigma Hidden Powershell in Link File Pattern test 2022-02-06
sigma Systemd Service Creation test 2022-02-06
sigma Log4j RCE CVE-2021-44228 Generic test 2022-02-06
snort ET TROJAN Win32/Colibri Loader Activity M3 rev 2 2022-02-05
snort ET TROJAN Win32/Colibri Loader Activity M2 rev 2 2022-02-05
snort ET CURRENT_EVENTS Generic Landing Page 2022-02-04 rev 1 2022-02-04
snort ET TROJAN Suspected Win32/Hancitor Checkin rev 2 2022-02-04
snort ET TROJAN TinyNuke VNC Checkin M3 rev 1 2022-02-04
snort ET TROJAN TinyNuke VNC Checkin M2 rev 1 2022-02-04
suricata ET PHISHING Generic Landing Page 2022-02-04 rev 2 2022-02-04
suricata ET MALWARE TinyNuke VNC Checkin M3 rev 1 2022-02-04
suricata ET MALWARE TinyNuke VNC Checkin M2 rev 1 2022-02-04
sigma Suspicious Execution of InstallUtil Without Log test 2022-02-04
snort ET TROJAN MacOS/UpdateAgent.A CnC Activity M2 rev 2 2022-02-03
snort ET CURRENT_EVENTS Successful Intuit Phish 2022-02-03 rev 1 2022-02-03
snort ET TROJAN Subterranean Crimson Rat - FileManager pwd Command rev 2 2022-02-03
snort ET TROJAN Parallax CnC Response Activity M17 rev 1 2022-02-03
snort ET TROJAN W32.Geodo/Emotet Checkin Fake 404 Response rev 2 2022-02-03
snort ET TROJAN Subterranean Crimson Rat - GetClientLog Command rev 2 2022-02-03
snort ET TROJAN Subterranean Security Domain in DNS Lookup rev 2 2022-02-03
snort ET TROJAN Subterranean Crimson Rat - Client Traffic rev 2 2022-02-03
snort ET TROJAN SManager Backdoor Domain in DNS Lookup rev 1 2022-02-03
snort ET TROJAN SManager Backdoor Domain in DNS Lookup rev 1 2022-02-03
snort ET TROJAN MacOS/UpdateAgent.A CnC Activity M1 rev 2 2022-02-03
snort ET TROJAN Subterranean Crimson Rat - AssignID Command rev 2 2022-02-03
snort ET TROJAN Emotet Certificate Observed M2 rev 3 2022-02-03
snort ET TROJAN Subterranean Crimson Rat - GetInfo Command rev 2 2022-02-03
snort ET TROJAN Subterranean Crimson Rat - FileManager List Command rev 2 2022-02-03
snort ET POLICY Http Client Body contains pin= in cleartext rev 1 2022-02-03
snort ET POLICY Http Client Body contains otp= in cleartext rev 1 2022-02-03
suricata ET INFO Http Client Body contains otp= in cleartext rev 2 2022-02-03
suricata ET INFO Http Client Body contains pin= in cleartext rev 2 2022-02-03
suricata ET MALWARE Subterranean Crimson Rat - GetClientLog Command rev 2 2022-02-03
suricata ET MALWARE Subterranean Crimson Rat - FileManager List Command rev 2 2022-02-03
suricata ET PHISHING Successful Intuit Phish 2022-02-03 rev 2 2022-02-03
suricata ET MALWARE Subterranean Crimson Rat - FileManager pwd Command rev 2 2022-02-03
suricata ET MALWARE Subterranean Crimson Rat - AssignID Command rev 2 2022-02-03