Phoenix
Sigma IntelligenceBeta

Search rules

Search the full rule library from any page.

    Open navigation menuClose navigation menu
    Threat coverage

    Emerging Threats

    Browse vulnerabilities, malware and threat actors, with related detections and references in one place.

    262Threats
    474Detections
    13Coverage years
    2026Latest year
    262 threats474 detectionsVulnerabilities, malware and actors with dedicated Sigma coverage.
    CVE2024

    CVE-2024-49113

    CVE-2024-49113 Exploitation Attempt - LDAP Nightmare

    gist.github.comgithub.comlinkedin.com
    Updated 2026-11-03
    1detection
    View coverage
    CVE2025

    CVE-2025-32463

    Non-Standard Nsswitch.Conf Creation - Potential CVE-2025-32463 Exploitation

    github.com
    Updated 2026-11-02
    1detection
    View coverage
    Actor2024 / 2023

    FIN7

    Potential APT FIN7 Related PowerShell Script Created · Potential APT FIN7 Exploitation Activity

    cloud.google.comgithub.comlabs.withsecure.com
    Updated 2026-11-02
    5detections
    View coverage
    Actor2023 / 2020 / 2017

    Lazarus

    Lazarus APT DLL Sideloading Activity · Lazarus Group Activity

    bleepingcomputer.comhvs-consulting.demedia.kasperskycontenthub.com
    Updated 2026-11-02
    3detections
    View coverage
    CVE2023

    CVE-2023-23397

    Potential CVE-2023-23397 Exploitation Attempt - SMB · Outlook Task/Note Reminder Received

    microsoft.comtrustedsec.comweb.archive.org
    Updated 2026-10-19
    3detections
    View coverage