Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET INFO Owncloud Observed Self Signed TLS Certificate rev 2 2021-11-29
sigma Mustang Panda Dropper test 2021-11-27
sigma ZxShell Malware test 2021-11-27
sigma Suspicious VBoxDrvInst.exe Parameters test 2021-11-27
sigma Bypass UAC via Fodhelper.exe test 2021-11-27
sigma Exploit for CVE-2015-1641 stable 2021-11-27
sigma WMI Event Subscription test 2021-11-27
sigma Exploiting SetupComplete.cmd CVE-2019-1378 test 2021-11-27
sigma Weak Encryption Enabled and Kerberoast test 2021-11-27
sigma SAM Registry Hive Handle Request test 2021-11-27
sigma Modification of ld.so.preload test 2021-11-27
sigma DNS TXT Answer with Possible Execution Strings test 2021-11-27
sigma Potential Remote Desktop Connection to Non-Domain Host test 2021-11-27
sigma Driver Load From A Temporary Directory test 2021-11-27
sigma File or Folder Permissions Change test 2021-11-27
sigma Auditing Configuration Changes on Linux Host test 2021-11-27
sigma AD Object WriteDAC Access test 2021-11-27
sigma Suspicious History File Operations test 2021-11-27
sigma Suspicious OpenSSH Daemon Error test 2021-11-27
sigma Symlink Etc Passwd test 2021-11-27
sigma Credentials from Password Stores - Keychain test 2021-11-27
sigma Windows WebDAV User Agent test 2021-11-27
sigma Program Executions in Suspicious Folders test 2021-11-27
sigma Logging Configuration Changes on Linux Host test 2021-11-27
sigma Suspicious C2 Activities test 2021-11-27
sigma Disable Security Tools test 2021-11-27
sigma Microsoft 365 - Impossible Travel Activity test 2021-11-27
sigma Credentials In Files test 2021-11-27
sigma Possible Impacket SecretDump Remote Activity - Zeek test 2021-11-27
sigma WMI Persistence - Script Event Consumer File Write test 2021-11-27
sigma Execute Files with Msdeploy.exe test 2021-11-27
sigma Registry Entries For Azorult Malware test 2021-11-27
sigma Windows Credential Editor Registry test 2021-11-27
sigma Wdigest CredGuard Registry Modification test 2021-11-27
sigma Path To Screensaver Binary Modified test 2021-11-27
sigma Disable Security Events Logging Adding Reg Key MiniNt test 2021-11-27
sigma Using SettingSyncHost.exe as LOLBin test 2021-11-27
sigma Exploit for CVE-2017-0261 test 2021-11-27
sigma UAC Bypass Via Wsreset test 2021-11-27
sigma Droppers Exploiting CVE-2017-11882 stable 2021-11-27