Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN W32.Razy Inject Domain in DNS Lookup rev 1 2019-01-25
snort ET TROJAN W32.Razy Inject Domain in DNS Lookup rev 1 2019-01-25
snort ET TROJAN [PTsecurity] Possible Backdoor.Win32.TeamBot / RTM C2 Response rev 2 2019-01-24
snort ET TROJAN [PTsecurity] Remcos RAT Checkin 85 rev 2 2019-01-24
snort ET TROJAN [PTsecurity] Remcos RAT Checkin 86 rev 2 2019-01-24
snort ET POLICY WinRM wsman Access - Possible Lateral Movement rev 2 2019-01-23
snort ET TROJAN [PTsecurity] Bitter RAT C2 Response rev 2 2019-01-22
snort ET WEB_SERVER jQuery File Upload Attempt rev 2 2019-01-22
snort ET TROJAN Mera Keylogger POSTing keystrokes rev 2 2019-01-21
snort ET TROJAN OSX/LamePyre Screenshot Upload rev 2 2019-01-17
snort ET TROJAN AtomLogger Exfil via FTP rev 2 2019-01-17
snort ET TROJAN MageCart CnC Domain in SNI rev 2 2019-01-16
snort ET TROJAN MageCart CnC Domain in SNI rev 2 2019-01-16
snort ET TROJAN SA Banker Checkin rev 2 2019-01-16
snort ET TROJAN APT DarkHydrus DNS Lookup 27 rev 2 2019-01-15
snort ET TROJAN APT DarkHydrus DNS Lookup 26 rev 2 2019-01-15
snort ET TROJAN APT DarkHydrus DNS Lookup 25 rev 2 2019-01-15
snort ET TROJAN APT DarkHydrus DNS Lookup 28 rev 2 2019-01-15
snort ET TROJAN PS/PowerRatankba CnC DNS Lookup rev 2 2019-01-15
snort ET TROJAN PS/PowerRatankba CnC DNS Lookup rev 2 2019-01-15
snort ET TROJAN Possible Sharik/Smoke Loader 7zip Connectivity Check rev 1 2019-01-14
snort ET TROJAN ServHelper RAT CnC Domain Observed in SNI rev 3 2019-01-14
snort ET TROJAN APT DarkHydrus DNS Lookup 1 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 21 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 6 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 19 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 14 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 22 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 3 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 23 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 4 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 2 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 16 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 9 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 7 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 17 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 5 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 15 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 10 rev 2 2019-01-11
snort ET TROJAN APT DarkHydrus DNS Lookup 13 rev 2 2019-01-11