Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CURRENT_EVENTS HM Revenue Phishing Landing rev 2 2018-06-21
snort ET CURRENT_EVENTS Paypal Phishing Landing rev 2 2018-06-21
snort ET CURRENT_EVENTS American Express Phishing Landing rev 2 2018-06-21
snort ET CURRENT_EVENTS Adobe Phishing Landing rev 2 2018-06-21
snort ET TROJAN [PTsecurity] Donut Ransomware CnC Checkin rev 2 2018-06-19
snort ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 rev 3 2018-06-18
snort ET TROJAN Cobalt Strike Malleable C2 Webbug Profile rev 3 2018-06-14
snort ET CURRENT_EVENTS Generic Paypal Phish Kit Landing rev 2 2018-06-14
snort ET TROJAN Malicious Chrome Extension Click Fraud Activity via Websocket rev 4 2018-06-11
snort ET TROJAN Aurora/OneKeyLocker Ransomware CnC Checkin rev 2 2018-05-30
snort ET CURRENT_EVENTS Successful Phishing Attempt via GetGoPhish Phishing Tool rev 2 2018-05-23
snort ET POLICY HTTPie User-Agent Outbound rev 1 2018-05-23
snort ET TROJAN Win32/Vibem.C CnC Activity rev 1 2018-05-18
snort ET TROJAN DDoS.XOR Checkin via HTTP rev 5 2018-05-18
snort ET TROJAN W32/Pterodo.CL CnC Checkin rev 3 2018-05-17
snort ET TROJAN Win32/Rarog Stealer CnC Keep-Alive rev 2 2018-05-16
snort ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS rev 4 2018-05-16
snort ET TROJAN InfoBot Sending Machine Details rev 2 2018-05-16
snort ET WEB_CLIENT PDF With Embedded U3D rev 3 2018-05-16
snort ET TROJAN W32/Patchwork.Backdoor Communicating with CnC rev 3 2018-05-11
snort ET TROJAN W32/Patchwork.Backdoor CnC Check-in M2 rev 3 2018-05-11
snort ET TROJAN ELF/Muhstik Attempting to Download Payload rev 2 2018-05-11
snort ET CURRENT_EVENTS Paypal Phishing Landing 2018-05-09 rev 2 2018-05-09
snort ET CURRENT_EVENTS Paypal Phishing Landing 2018-05-09 rev 2 2018-05-09
snort ET CURRENT_EVENTS Netflix Phishing Landing 2018-05-09 rev 2 2018-05-09
snort ET CURRENT_EVENTS Netflix Phishing Landing 2018-05-09 rev 2 2018-05-09
snort ET CURRENT_EVENTS Paypal Phishing Landing 2018-05-09 rev 2 2018-05-09
snort ET CURRENT_EVENTS Paypal Phishing Landing 2018-05-09 rev 2 2018-05-09
snort ET CURRENT_EVENTS Possible Successful TSB Bank Phish 2018-05-07 rev 2 2018-05-07
snort ET CURRENT_EVENTS IRS Phishing Landing 2018-05-07 rev 2 2018-05-07
snort ET CURRENT_EVENTS Successful IRS Phish 2018-05-07 rev 2 2018-05-07
snort ET CURRENT_EVENTS Paypal Phishing Landing 2018-05-02 rev 2 2018-05-02
snort ET CURRENT_EVENTS Netflix Phishing Landing 2018-05-02 rev 2 2018-05-02
snort ET CURRENT_EVENTS Bank of America Phishing Landing 2018-05-01 rev 2 2018-05-01
snort ET TROJAN Java/QRat Variant Checkin rev 1 2018-05-01
snort ET WEB_SERVER WebShell - Generic - GIF Header With HTML Form rev 4 2018-05-01
snort ET CURRENT_EVENTS Outlook Web App Phishing Landing 2018-04-26 rev 2 2018-04-26
snort ET POLICY WebRTC IP tracking Javascript rev 2 2018-04-26
snort ET TROJAN MSIL/G1 Stealer/GravityRAT Requesting Payload rev 2 2018-04-26
snort ET CURRENT_EVENTS Chalbhai Phishing Landing Feb 18 2016 rev 4 2018-04-26