Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Win32/BanloadDownloader.XZY Retrieving Payload rev 3 2018-09-05
snort ET TROJAN Suspected Monero Miner CnC Channel Secondary Domain Lookup rev 1 2018-09-05
snort ET TROJAN W32.FakeEzQ.kr Checkin rev 1 2018-08-31
snort ET CURRENT_EVENTS Dropbox Phishing Landing 2018-08-30 rev 2 2018-08-30
snort ET WEB_CLIENT Generic PhishKit Author Comment M4 2018-08-30 rev 2 2018-08-30
snort ET WEB_CLIENT Generic PhishKit Author Comment M9 2018-08-30 rev 2 2018-08-30
snort ET CURRENT_EVENTS WeTransfer Phishing Landing 2018-08-30 rev 2 2018-08-30
snort ET CURRENT_EVENTS Hellion Postmaster Phishing Landing 2018-08-30 rev 2 2018-08-30
snort ET CURRENT_EVENTS Generic Mailbox Phishing Landing 2018-08-30 rev 2 2018-08-30
snort ET WEB_CLIENT Generic PhishKit Author Comment M10 2018-08-30 rev 2 2018-08-30
snort ET CURRENT_EVENTS AT&T Phishing Landing 2018-08-30 rev 2 2018-08-30
snort ET WEB_CLIENT Generic PhishKit Author Comment M8 2018-08-30 rev 2 2018-08-30
snort ET WEB_CLIENT Generic PhishKit Author Comment M6 2018-08-30 rev 2 2018-08-30
snort ET WEB_CLIENT Generic PhishKit Author Comment M3 2018-08-30 rev 2 2018-08-30
snort ET WEB_CLIENT Generic PhishKit Author Comment M5 2018-08-30 rev 2 2018-08-30
snort ET CURRENT_EVENTS Generic Mailbox Phishing Landing 2018-08-30 rev 2 2018-08-30
snort ET CURRENT_EVENTS Bank of America Phishing Landing 2018-08-30 rev 2 2018-08-30
snort ET CURRENT_EVENTS Bank of America Phishing Landing 2018-08-30 rev 2 2018-08-30
snort ET WEB_CLIENT Generic PhishKit Author Comment M1 2018-08-30 rev 2 2018-08-30
snort ET WEB_CLIENT Generic PhishKit Author Comment M2 2018-08-30 rev 2 2018-08-30
snort ET CURRENT_EVENTS Linkedin Phishing Landing 2018-08-30 rev 2 2018-08-30
snort ET WEB_CLIENT Generic PhishKit Author Comment M7 2018-08-30 rev 2 2018-08-30
snort ET WEB_SPECIFIC_APPS MicroFocus Secure Messaging Gateway SQL Injection rev 2 2018-08-24
snort ET WEB_SPECIFIC_APPS MicroFocus Secure Messaging Gateway Remote Code Execution rev 2 2018-08-24
snort ET EXPLOIT HP Enterprise VAN SDN Controller Upload Backdoor 2 rev 2 2018-08-24
snort ET WEB_SPECIFIC_APPS Apache Struts inbound .getClass OGNL injection remote code execution attempt rev 2 2018-08-24
snort ET WEB_SPECIFIC_APPS Apache Struts java.lang inbound OGNL injection remote code execution attempt rev 2 2018-08-24
snort ET WEB_SPECIFIC_APPS Apache Struts inbound .getWriter OGNL injection remote code execution attempt rev 2 2018-08-24
snort ET TROJAN Possible MalDoc Payload Download Nov 11 2014 rev 2 2018-08-23
snort ET TROJAN [PT MALWARE] Hacked Mikrotik C2 Request rev 2 2018-08-23
snort ET SCAN Geutebrueck re_porter 7.8.974.20 Information Disclosure rev 2 2018-08-22
snort ET SCAN Hikvision IP Camera 5.4.0 Information Disclosure rev 2 2018-08-22
snort ET TROJAN [PTsecurity] MSIL/Biskvit.A Check-in rev 2 2018-08-22
snort ET TROJAN [PTsecurity] Remcos RAT Checkin 26 rev 1 2018-08-21
snort ET SCADA SEIG SYSTEM 9 - Remote Code Execution rev 1 2018-08-21
snort ET SCADA SEIG Modbus 3.4 - Remote Code Execution rev 1 2018-08-21
snort ET CURRENT_EVENTS Successful Generic Phish Phish 2018-08-21 rev 2 2018-08-21
snort ET EXPLOIT ETERNALBLUE Probe Vulnerable System Response MS17-010 rev 3 2018-08-15
snort ET MOBILE_MALWARE Trojan-Spy.AndroidOS.CrazyMango.a CnC Beacon rev 2 2018-08-13
snort ET MOBILE_MALWARE Trojan-Spy.AndroidOS.CrazyMango.a Checkin 2 rev 2 2018-08-13