Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
sigma Execute Files with Msdeploy.exe test 2021-11-27
sigma Using SettingSyncHost.exe as LOLBin test 2021-11-27
sigma Audio Capture via SoundRecorder test 2021-11-27
sigma Trickbot Malware Activity stable 2021-11-27
sigma Disabled IE Security Features test 2021-11-27
sigma Mustang Panda Dropper test 2021-11-27
sigma TAIDOOR RAT DLL Load test 2021-11-27
sigma Winnti Malware HK University Campaign test 2021-11-27
sigma Bypass UAC via Fodhelper.exe test 2021-11-27
sigma Winnti Pipemon Characteristics stable 2021-11-27
sigma Devtoolslauncher.exe Executes Specified Binary test 2021-11-27
sigma Disable Security Events Logging Adding Reg Key MiniNt test 2021-11-27
sigma Run PowerShell Script from Redirected Input Stream test 2021-11-27
sigma ZxShell Malware test 2021-11-27
sigma Exploit for CVE-2015-1641 stable 2021-11-27
sigma Exploit for CVE-2017-0261 test 2021-11-27
sigma Droppers Exploiting CVE-2017-11882 stable 2021-11-27
sigma Exploit for CVE-2017-8759 test 2021-11-27
sigma Fireball Archer Install test 2021-11-27
sigma Exploiting SetupComplete.cmd CVE-2019-1378 test 2021-11-27
sigma Malware Shellcode in Verclsid Target Process test 2021-11-27
sigma Suspicious Rundll32 Setupapi.dll Activity test 2021-11-27
sigma Equation Group C2 Communication test 2021-11-27
sigma Octopus Scanner Malware test 2021-11-27
sigma Suspicious RASdial Activity test 2021-11-27
sigma Turla Group Named Pipes test 2021-11-27
sigma DNS Exfiltration and Tunneling Tools Execution test 2021-11-27
sigma Interactive AT Job test 2021-11-27
sigma WINEKEY Registry Modification test 2021-11-27
sigma RedMimicry Winnti Playbook Registry Manipulation test 2021-11-27
sigma Suspicious Desktopimgdownldr Command test 2021-11-27
sigma Registry Entries For Azorult Malware test 2021-11-27
sigma SSHD Error Message CVE-2018-15473 test 2021-11-27
sigma DLL Execution Via Register-cimprovider.exe test 2021-11-27
sigma Windows Credential Editor Registry test 2021-11-27
sigma Wdigest CredGuard Registry Modification test 2021-11-27
sigma UAC Bypass Via Wsreset test 2021-11-27
sigma Suspicious PrinterPorts Creation (CVE-2020-1048) test 2021-11-27
sigma Equation Group Indicators test 2021-11-27
sigma Guacamole Two Users Sharing Session Anomaly test 2021-11-27