Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN ELF/TooEasy Miner CnC Checkin rev 2 2018-01-25
snort ET CURRENT_EVENTS Generic Multi-Email Phishing Landing 2018-01-25 rev 2 2018-01-24
snort ET CURRENT_EVENTS Facebook Phishing Landing 2018-01-23 rev 2 2018-01-23
snort ET TROJAN Win32/Rodecap/Travle/PYLOT CnC Checkin M2 rev 2 2018-01-22
snort ET CURRENT_EVENTS Email Verification/Upgrade Phishing Landing 2018-01-22 rev 2 2018-01-22
snort ET TROJAN Banload CnC Activity rev 1 2018-01-22
snort ET TROJAN VBS.ARS Checkin rev 2 2018-01-22
snort ET TROJAN MSIL/SamMiner CnC Checkin M1 rev 2 2018-01-22
snort ET CURRENT_EVENTS Dropbox Phishing Landing - Title over non SSL rev 2 2018-01-22
snort ET INFO Base64 Encoded powershell.exe in HTTP Response M1 rev 1 2018-01-22
snort ET INFO Base64 Encoded powershell.exe in HTTP Response M3 rev 1 2018-01-22
snort ET TROJAN MSIL/SamMiner CnC Checkin M2 rev 2 2018-01-22
snort ET INFO Base64 Encoded powershell.exe in HTTP Response M2 rev 1 2018-01-22
snort ET TROJAN Win32.Drun Checkin rev 1 2018-01-19
snort ET EXPLOIT Possible Belkin N600DB Wireless Router Request Forgery Attempt rev 2 2018-01-19
snort ET EXPLOIT Generic ADSL Router DNS Change Request rev 2 2018-01-19
snort ET CURRENT_EVENTS Microsoft Questionnaire Phishing Landing 2018-01-19 rev 2 2018-01-19
snort ET TROJAN Formbook 0.3 Checkin rev 5 2018-01-19
snort ET CURRENT_EVENTS Dropbox Phishing Landing 2018-01-18 rev 2 2018-01-18
snort ET CURRENT_EVENTS Chase Phishing Landing 2018-01-18 rev 2 2018-01-18
snort ET TROJAN Malicious Chrome Extension Requesting Websocket rev 2 2018-01-18
snort ET CURRENT_EVENTS Paypal Phishing Landing 2018-01-18 M2 rev 2 2018-01-18
snort ET TROJAN [PTsecurity] Adwind SSL Certificate Observed rev 2 2018-01-18
snort ET CURRENT_EVENTS Bank of America Phishing Landing 2018-01-18 M1 rev 2 2018-01-18
snort ET WEB_CLIENT Suspicious Redirect - Possible Phishing May 25 2016 rev 4 2018-01-18
snort ET CURRENT_EVENTS Bank of America Phishing Landing 2018-01-18 M2 rev 2 2018-01-18
snort ET CURRENT_EVENTS Possible Chase Phishing Landing - Title over non SSL rev 2 2018-01-18
snort ET TROJAN [PTsecurity] Gozi/Ursnif Payload v14 rev 2 2018-01-17
snort ET CURRENT_EVENTS Successful Generic Phish M2 2016-10-27 rev 2 2018-01-17
snort ET TROJAN OSX/Mami Possible DNS Query to Evil DNS Server rev 2 2018-01-16
snort ET TROJAN MoneroPay Ransomware Payment Activity rev 2 2018-01-16
snort ET TROJAN OSX/Mami CnC Checkin rev 2 2018-01-14
snort ET CURRENT_EVENTS Generic Phishing Landing 2018-01-12 rev 2 2018-01-12
snort ET CURRENT_EVENTS Successful Dropbox/Docusign Phish 2016-10-28 rev 2 2018-01-10
snort ET WEB_SPECIFIC_APPS Open Source Support Ticket System module.php Local File Inclusion Attempt rev 3 2018-01-10
snort ET EXPLOIT xp_readerrorlogs access rev 5 2018-01-09
snort ET EXPLOIT xp_enumerrorlogs access rev 4 2018-01-09
snort ET EXPLOIT xp_enumdsn access rev 5 2018-01-09
snort ET ATTACK_RESPONSE WSO - WebShell Activity - WSO Title rev 2 2018-01-08
snort ET TROJAN Sourtoff Receiving Simda Payload rev 3 2018-01-08