Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET EXPLOIT Possible ETERNALCHAMPION MS17-010 Sync Response rev 3 2017-04-17
snort ET EXPLOIT Possible ETERNALROMANCE MS17-010 rev 2 2017-04-17
snort ET INFO Redirection to driveby Page Home index.php rev 3 2017-04-14
snort ET INFO http string in hex Possible Obfuscated Exploit Redirect rev 3 2017-04-14
snort ET MOBILE_MALWARE AdWare.AndroidOS.Ewind.cd Response rev 1 2017-04-11
snort ET CURRENT_EVENTS EITest SocENG Inject M2 rev 1 2017-04-11
snort ET TROJAN Backdoor.Win32.DarkComet Keepalive Inbound rev 7 2017-04-10
snort ET WEB_CLIENT HTA File Download Flowbit Set rev 1 2017-04-10
snort ET TROJAN W32/Kegotip CnC Beacon rev 3 2017-04-10
snort ET CURRENT_EVENTS Successful HM Revenue & Customs Phish M2 Apr 07 2017 rev 1 2017-04-07
snort ET EXPLOIT TP-Link Archer C2 and Archer C20i Remote Code Execution rev 2 2017-04-07
snort ET CURRENT_EVENTS Successful HM Revenue & Customs Phish M1 Apr 07 2017 rev 1 2017-04-07
snort ET TROJAN Trojan Generic - POST To gate.php with no accept headers rev 2 2017-04-05
snort ET CURRENT_EVENTS Terror EK CVE-2015-2419 Exploit rev 1 2017-04-04
snort ET TROJAN Felismus CnC Beacon 1 rev 1 2017-04-04
snort ET CURRENT_EVENTS Terror EK CVE-2016-0189 Exploit rev 1 2017-04-04
snort ET CURRENT_EVENTS Terror EK CVE-2016-0189 Exploit M2 rev 1 2017-04-04
snort ET TROJAN Win32/Neutrino Checkin 6 rev 2 2017-04-04
snort ET MOBILE_MALWARE Android.C2P.Qd!c Ransomware CnC Beacon rev 1 2017-03-31
snort ET CURRENT_EVENTS MalDoc Retrieving Payload March 30 2017 rev 1 2017-03-30
snort ET TROJAN Win32/Neutrino Checkin rev 4 2017-03-29
snort ET TROJAN Win32/Neutrino Checkin 3 rev 2 2017-03-29
snort ET TROJAN Win32/Neutrino Cookie rev 4 2017-03-29
snort ET TROJAN Win32/Neutrino ping rev 3 2017-03-29
snort ET TROJAN Win32/Neutrino CC dump rev 2 2017-03-29
snort ET MOBILE_MALWARE Android/Opfake.A GetTask CnC Beacon rev 3 2017-03-29
snort ET TROJAN Win32/Neutrino Checkin 2 rev 2 2017-03-29
snort ET TROJAN Win32/Neutrino Bot Fake 404 Checkin Response rev 2 2017-03-29
snort ET CURRENT_EVENTS Successful RBC Royal Bank Phish Mar 27 2017 rev 1 2017-03-27
snort ET CURRENT_EVENTS Successful Paypal Phish Mar 22 2017 rev 2 2017-03-22
snort ET TROJAN Win32/CryptFile2 / Revenge Ransomware Checkin M3 rev 2 2017-03-17
snort ET SHELLCODE Linux/x86-64 - Reverse Shell Shellcode rev 1 2017-03-16
snort ET CURRENT_EVENTS Microsoft Live Email Account Phishing Landing Mar 16 2017 rev 1 2017-03-16
snort ET TROJAN MagikPOS Downloader Checkin rev 2 2017-03-16
snort ET TROJAN MagikPOS CnC Beacon rev 2 2017-03-16
snort ET POLICY HTTP Request to a *.tk domain rev 9 2017-03-16
snort ET CURRENT_EVENTS Successful Apple Phish M2 Mar 15 2017 rev 1 2017-03-15
snort ET CURRENT_EVENTS Successful Apple Phish M1 Mar 15 2017 rev 2 2017-03-15
snort ET EXPLOIT IBM WebSphere - RCE Java Deserialization rev 2 2017-03-15
snort ET SHELLCODE Linux/x86-64 - Polymorphic Flush IPTables Shellcode rev 1 2017-03-15