Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET EXPLOIT AVTECH Authenticated Command Injection in PwdGrp.cgi rev 2 2017-10-25
snort ET EXPLOIT AVTECH Authenticated Command Injection in CloudSetup.cgi rev 2 2017-10-25
snort ET TROJAN Possible IoT_reaper ELF Binary Download rev 2 2017-10-25
snort ET EXPLOIT D-Link 850L Password Extract Attempt rev 2 2017-10-25
snort ET EXPLOIT Netgear DGN Remote Command Execution rev 2 2017-10-25
snort ET EXPLOIT AVTECH Authenticated Command Injection in adcommand.cgi rev 2 2017-10-25
snort ET EXPLOIT AVTECH Unauthenticated Command Injection in DVR Devices rev 2 2017-10-25
snort ET CURRENT_EVENTS Successful Generic AES Phish M1 Oct 24 2017 rev 2 2017-10-24
snort ET CURRENT_EVENTS Adobe Shared Document Phish Landing 2015-11-14 rev 2 2017-10-24
snort ET CURRENT_EVENTS Successful Telstra Phish M2 2015-09-05 rev 2 2017-10-24
snort ET CURRENT_EVENTS Successful Yahoo Phish M1 2016-06-15 rev 2 2017-10-24
snort ET CURRENT_EVENTS Possible BadRabbit Driveby Download M2 Oct 24 2017 rev 2 2017-10-24
snort ET CURRENT_EVENTS Successful Bank of America Phish 2015-11-06 rev 3 2017-10-24
snort ET TROJAN Locky Intermediate Downloader rev 2 2017-10-23
snort ET TROJAN Possible Dragonfly APT Activity HTTP URI OPTIONS rev 2 2017-10-23
snort ET CURRENT_EVENTS Successful Generic Brand Phish 2016-12-01 rev 2 2017-10-23
snort ET MOBILE_MALWARE Android JadeRAT CnC Beacon rev 1 2017-10-23
snort ET TROJAN Possible Dragonfly APT Activity - SMB credential harvesting rev 1 2017-10-23
snort ET TROJAN Possible Winnti-related Destination rev 1 2017-10-18
snort ET TROJAN Tordal/Hancitor/Chanitor Checkin rev 4 2017-10-18
snort ET TROJAN Possible Winnti-related Destination rev 1 2017-10-18
snort ET CURRENT_EVENTS Successful OX App Suite Phish 2017-10-12 rev 3 2017-10-18
snort ET TROJAN Possible Winnti-related Destination rev 1 2017-10-18
snort ET TROJAN Possible Winnti-related Destination rev 2 2017-10-18
snort ET TROJAN Possible Winnti-related Destination rev 1 2017-10-18
snort ET TROJAN Possible Winnti-related Destination rev 1 2017-10-18
snort ET TROJAN Possible Winnti-related Destination rev 1 2017-10-18
snort ET TROJAN Possible Winnti-related Destination rev 1 2017-10-18
snort ET TROJAN Possible Winnti-related Destination rev 1 2017-10-18
snort ET TROJAN Possible Winnti-related Destination rev 1 2017-10-18
snort ET CURRENT_EVENTS Successful DHL Phish 2015-09-14 rev 2 2017-10-17
snort ET CURRENT_EVENTS DHL Phish Landing 2015-11-14 rev 2 2017-10-17
snort ET CURRENT_EVENTS DHL Phishing Landing 2016-01-07 rev 2 2017-10-17
snort ET TROJAN Trojan.JS.Agent.dwz Checkin rev 1 2017-10-17
snort ET CURRENT_EVENTS Successful DHL Phish 2015-11-14 rev 2 2017-10-17
snort ET CURRENT_EVENTS DHL Phishing Landing 2016-07-11 rev 2 2017-10-17
snort ET CURRENT_EVENTS Successful DHL Phish 2015-09-30 rev 2 2017-10-17
snort ET CURRENT_EVENTS Successful DHL Phish 2016-07-11 rev 2 2017-10-17
snort ET CURRENT_EVENTS Successful Onedrive Phish 2016-05-16 rev 2 2017-10-17
snort ET CURRENT_EVENTS Successful DHL Phish 2015-09-17 rev 2 2017-10-17