Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
sigma Protected Storage Service Access test 2021-11-27
sigma Denied Access To Remote Desktop test 2021-11-27
sigma File or Folder Permissions Change test 2021-11-27
sigma HTTP Request With Empty User Agent test 2021-11-27
sigma Suspicious OpenSSH Daemon Error test 2021-11-27
sigma Weak Encryption Enabled and Kerberoast test 2021-11-27
sigma Split A File Into Pieces test 2021-11-27
sigma Possible Impacket SecretDump Remote Activity - Zeek test 2021-11-27
sigma Suspicious History File Operations test 2021-11-27
sigma Suspicious C2 Activities test 2021-11-27
sigma Transferring Files with Credential Data via Network Shares - Zeek test 2021-11-27
sigma Auditing Configuration Changes on Linux Host test 2021-11-27
sigma Kerberos Network Traffic RC4 Ticket Encryption test 2021-11-27
sigma Modification of ld.so.preload test 2021-11-27
sigma Logging Configuration Changes on Linux Host test 2021-11-27
sigma Apache Segmentation Fault test 2021-11-27
sigma Apache Threading Error test 2021-11-27
sigma Disable Security Tools test 2021-11-27
sigma Program Executions in Suspicious Folders test 2021-11-27
sigma Credentials from Password Stores - Keychain test 2021-11-27
sigma PwnDrp Access test 2021-11-27
sigma Microsoft 365 - Impossible Travel Activity test 2021-11-27
sigma Symlink Etc Passwd test 2021-11-27
sigma SAM Registry Hive Handle Request test 2021-11-27
sigma Linux Remote System Discovery test 2021-11-27
sigma Crypto Miner User Agent test 2021-11-27
snort ET TROJAN Dridex CnC Request - Spam/Worm Component rev 1 2021-11-24
snort ET TROJAN Dridex CnC Request - Spam/Worm Component rev 1 2021-11-23
suricata ET MALWARE W32/Snojan.BNQKZQH User-Agent rev 1 2021-11-23
snort ET TROJAN Win32/BlackNET CnC Requesting Command rev 4 2021-11-22
snort ET EXPLOIT Possible FatPipe Unrestricted File Upload rev 1 2021-11-22
snort ET EXPLOIT FatPipe Unrestricted File Upload rev 2 2021-11-22
suricata ET EXPLOIT Possible FatPipe Unrestricted File Upload rev 1 2021-11-22
snort ET TROJAN lu0bot Loader HTTP Request M2 rev 2 2021-11-19
snort ET TROJAN lu0bot Loader HTTP Response M2 rev 2 2021-11-19
suricata ET MALWARE lu0bot Loader HTTP Response M2 rev 1 2021-11-19
snort ET INFO Possible UPnP UUID Overflow Exploit Attempt from Internal Host - SUBSCRIBE/UNSUBSCRIBE rev 1 2021-11-18
snort ET POLICY Burp Collaborator Certificate Inbound rev 2 2021-11-18
snort ET TROJAN ELF/AbcBot CnC Checkin rev 1 2021-11-18
snort ET INFO Possible UPnP UUID Overflow Exploit Attempt from External Host - NOTIFY rev 1 2021-11-18