Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
ATT&CK technique

T1598

Phishing for Information

Reconnaissance 2 detections found
View on MITRE ATT&CK →

Detection rules

Source Rule Status Updated
splunk Cisco Secure Firewall - Rare Snort Rule Triggered production 2026-05-13
sentinel Suspicious link sharing pattern Scheduled —