Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET MALWARE Win32 Dialer Variant rev 9 2020-04-21
suricata ET MALWARE Generic Dropper/Clicker Checkin rev 5 2020-04-21
suricata ET MALWARE Common Downloader Install Report URL rev 9 2020-04-21
suricata ET MALWARE Trojan.Win32.Buzus Checkin rev 6 2020-04-21
suricata ET MALWARE Zbot CnC POST /common/versions.php rev 3 2020-04-21
suricata ET WEB_SPECIFIC_APPS PHP-Nuke SQL Injection Attempt -- modules.php pid SELECT rev 8 2020-04-21
suricata ET MALWARE Backdoor.Meciv Checkin rev 4 2020-04-21
suricata ET WEB_SPECIFIC_APPS IBBY nouvelles.php id Parameter INSERT INTO SQL Injection Attempt rev 4 2020-04-21
suricata ET MALWARE Cycbot POST rev 4 2020-04-21
suricata ET MALWARE W32/Koobface Variant Checkin Attempt rev 3 2020-04-21
suricata ET MALWARE Gozi check-in / update rev 6 2020-04-21
suricata ET USER_AGENTS Atomic_Email_Hunter User-Agent Inbound rev 5 2020-04-21
suricata ET MALWARE ProxyBot Phone Home Traffic rev 6 2020-04-21
suricata ET WEB_SPECIFIC_APPS IBBY nouvelles.php id Parameter UNION SELECT SQL Injection Attempt rev 4 2020-04-21
suricata ET MALWARE OSX/Flashback.K/I reporting successful infection rev 5 2020-04-21
suricata ET INFO File Being Uploaded to SendSpace File Hosting Site rev 3 2020-04-21
suricata ET MALWARE Downloader.Win32.Banload Reporting rev 5 2020-04-21
suricata ET WEB_SPECIFIC_APPS PHP-Nuke SQL Injection Attempt -- modules.php cid UPDATE rev 8 2020-04-21
suricata ET MALWARE Win32/Chekafe.A or Related Infection Checkin rev 6 2020-04-21
suricata ET MALWARE W32/118GotYourNo Reporting to CnC rev 5 2020-04-21
suricata ET MALWARE Win32.Lager Trojan Initial Checkin rev 6 2020-04-21
suricata ET MOBILE_MALWARE Android/Plankton.P Commands Request to CnC Server rev 3 2020-04-21
suricata ET MALWARE Trojan Downloader.Bancos Reporting rev 5 2020-04-21
suricata ET EXPLOIT_KIT Sakura Exploit Kit Binary Load Request rev 3 2020-04-21
suricata ET MALWARE BestAntivirus2011 Fake AV reporting rev 4 2020-04-21
suricata ET MALWARE Generic Checkin - MSCommonInfoEx rev 6 2020-04-21
suricata ET MALWARE W32/Downvision.A Initial Checkin rev 5 2020-04-21
suricata ET MALWARE Win32.FakeAV.chhq Checkin rev 10 2020-04-21
suricata ET MALWARE OSX/Flashback.K first execution checkin rev 5 2020-04-21
suricata ET MALWARE Likely Fake Antivirus Download InternetAntivirusPro.exe rev 11 2020-04-21
suricata ET MALWARE Trojan.Win32.Genome.aetqe Checkin rev 2 2020-04-21
suricata ET INFO Dlink Soho Router Config Page Access Attempt rev 8 2020-04-21
suricata ET MALWARE Koobface Trojan HTTP Post Checkin rev 8 2020-04-21
suricata ET INFO HTTP POST contains pass= in cleartext rev 4 2020-04-21
suricata ET EXPLOIT_KIT Sakura Exploit Kit Version 1.1 Archive Request rev 3 2020-04-21
suricata ET MALWARE Possible Ponmocup Driveby Download rev 4 2020-04-21
suricata ET MALWARE Carberp checkin task rev 8 2020-04-21
suricata ET MALWARE W32/Taidoor.Backdoor CnC Checkin With Default Substitute MAC Address Field rev 3 2020-04-21
suricata ET MALWARE Dosenjo/Kvadr Proxy Trojan Activity rev 6 2020-04-21
suricata ET MALWARE Zbot CnC GET /lost.dat rev 4 2020-04-21