Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CURRENT_EVENTS Successful Poloniex Cryptocurrency Exchange Phish Aug 28 2017 rev 2 2017-08-28
snort ET CURRENT_EVENTS Successful Bank of America Phish 2016-10-14 rev 3 2017-08-28
snort ET TROJAN JS/HTA Downloader Behavior M3 rev 3 2017-08-25
snort ET CURRENT_EVENTS Disdain EK Flash Exploit M1 Aug 23 2017 rev 1 2017-08-23
snort ET CURRENT_EVENTS Disdain EK Flash Exploit M3 Aug 23 2017 rev 1 2017-08-23
snort ET CURRENT_EVENTS Disdain EK Flash Exploit M2 Aug 23 2017 rev 1 2017-08-23
snort ET CURRENT_EVENTS Disdain EK Payload Aug 23 2017 rev 1 2017-08-23
snort ET CURRENT_EVENTS Likely Malicious Windows SCT Download MSXMLHTTP AX M2 rev 1 2017-08-22
snort ET TROJAN LURK Trojan Communication Protocol detected rev 3 2017-08-21
snort ET TROJAN Possible Maldoc Downloader Aug 18 2017 rev 1 2017-08-21
snort ET CURRENT_EVENTS Successful Barclays Phish M1 2016-10-06 rev 2 2017-08-18
snort ET CURRENT_EVENTS Successful Barclays Phish M3 2016-09-09 rev 2 2017-08-18
snort ET CURRENT_EVENTS Successful Barclays Phish M2 2016-09-09 rev 2 2017-08-18
snort ET CURRENT_EVENTS Successful BBVA Compass Account Phish 2015-08-21 rev 2 2017-08-18
snort ET CURRENT_EVENTS Successful Bank of Scotland Phish M1 2015-11-05 rev 2 2017-08-18
snort ET CURRENT_EVENTS Possible Interac Phish Aug 18 2017 rev 2 2017-08-18
snort ET CURRENT_EVENTS Successful Blackboard Account Phish 2015-10-08 rev 2 2017-08-18
snort ET CURRENT_EVENTS Successful Blocked Email Account Phish M1 2016-08-23 rev 2 2017-08-18
snort ET CURRENT_EVENTS Successful Barclays Phish M1 2016-09-09 rev 2 2017-08-18
snort ET CURRENT_EVENTS Successful BB&T Bank Phish 2016-12-15 rev 2 2017-08-18
snort ET CURRENT_EVENTS Successful Barclays Phish M2 2016-10-06 rev 2 2017-08-18
snort ET CURRENT_EVENTS Successful Bank of America Phish 2016-10-03 rev 2 2017-08-18
snort ET CURRENT_EVENTS L33bo Phishing Kit - Successful Credential Phish M1 2016-03-29 rev 2 2017-08-17
snort ET CURRENT_EVENTS Possible Successful Yahoo Phish Nov 21 2012 rev 5 2017-08-17
snort ET CURRENT_EVENTS Possible Successful Gmail Phish Nov 21 2012 rev 3 2017-08-17
snort ET CURRENT_EVENTS Successful Bank of America Phish M3 2016-10-27 rev 2 2017-08-17
snort ET CURRENT_EVENTS Successful Bank of America Phish M2 2016-11-23 rev 2 2017-08-17
snort ET CURRENT_EVENTS Google Drive Phishing Landing Jul 10 2015 rev 2 2017-08-17
snort ET CURRENT_EVENTS Possible Successful Yahoo Phish Nov 25 2013 rev 2 2017-08-17
snort ET CURRENT_EVENTS Possible Successful Generic SSN Phish rev 3 2017-08-17
snort ET CURRENT_EVENTS Successful Generic Credit Card Information Phish rev 2 2017-08-17
snort ET TROJAN NetWire / Ozone / Darktrack Alien RAT - Server Hello rev 6 2017-08-17
snort ET CURRENT_EVENTS Successful Bank of America Phish M2 2016-10-21 rev 2 2017-08-17
snort ET CURRENT_EVENTS Possible Successful AOL Phish Nov 21 2012 rev 3 2017-08-17
snort ET CURRENT_EVENTS Possible Fedex Phishing Landing 2015-07-28 rev 2 2017-08-17
snort ET POLICY Office Document Download Containing AutoOpen Macro rev 2 2017-08-17
snort ET CURRENT_EVENTS L33bo Phishing Kit - Successful Credential Phish M2 2016-03-29 rev 2 2017-08-17
snort ET CURRENT_EVENTS Possible Google Drive Phishing Landing 2015-07-13 rev 2 2017-08-17
snort ET CURRENT_EVENTS Successful Paypal Phish Nov 24 2014 rev 2 2017-08-17
snort ET CURRENT_EVENTS Possible Successful Gmail Phish Nov 25 2013 rev 2 2017-08-17