Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Evil JS Ransomware rev 1 2017-01-18
snort ET TROJAN Dooptroop CnC Beacon rev 3 2017-01-18
snort ET TROJAN Dooptroop Dropper Checkin rev 3 2017-01-18
snort ET CURRENT_EVENTS Successful Yahoo Phish 2016-10-27 rev 3 2017-01-17
snort ET TROJAN Pony DLL Download M2 rev 1 2017-01-13
snort ET WEB_SERVER SQL Injection Select Sleep Time Delay rev 2 2017-01-13
snort ET TFTP Outbound TFTP Read Request rev 4 2017-01-12
snort ET CURRENT_EVENTS Successful Western Union/Paypal Phish 2016-09-26 rev 2 2017-01-12
snort ET TROJAN Maldoc Second Stage VBS Downloader with URL Padding rev 1 2017-01-12
snort ET TROJAN Suspicious UA Mozilla / 4.0 rev 5 2017-01-12
snort ET TROJAN Linux/Venom CnC Beacon rev 1 2017-01-11
snort ET INFO ATF file in HTTP Flowbit Set rev 1 2017-01-10
snort ET CURRENT_EVENTS Successful USAA Phish 2016-11-22 rev 2 2017-01-09
snort ET EXPLOIT Possible Malicious NAT-PMP Response to External Network rev 3 2017-01-06
snort ET INFO PDF Containing Subform with JavaScript rev 4 2017-01-06
snort ET CURRENT_EVENTS Successful Bradesco Bank Phish M1 Jan 05 2017 rev 1 2017-01-05
snort ET TROJAN Blackmoon/Banbra Configuration Request M2 rev 1 2017-01-04
snort ET TROJAN MRCR1 Ransomware Checkin M2 rev 1 2017-01-03
snort ET TROJAN MRCR1 Ransomware Checkin M1 rev 1 2017-01-03
snort ET CURRENT_EVENTS Successful Banamex Bank Phish 2016-12-29 rev 1 2016-12-29
snort ET CURRENT_EVENTS Successful Ebay Phish M1 2016-12-29 rev 1 2016-12-29
snort ET CURRENT_EVENTS Successful Ebay Phish M2 2016-12-29 rev 1 2016-12-29
snort ET POLICY Suspicious User-Agent Containing .exe rev 15 2016-12-29
snort ET CURRENT_EVENTS Successful Chase Phish Dec 29 2016 rev 1 2016-12-29
snort ET CURRENT_EVENTS Successful Gmail Phish 2016-09-30 rev 2 2016-12-29
snort ET CURRENT_EVENTS Successful Wells Fargo Phish M1 2016-12-29 rev 1 2016-12-29
snort ET TROJAN Possible Tinba DGA NXDOMAIN Responses rev 2 2016-12-29
snort ET CURRENT_EVENTS Successful Webmail Account Upgrade Phish 2016-12-27 rev 1 2016-12-28
snort ET SCAN Acunetix scan in progress acunetix_wvs_security_test in http_uri rev 1 2016-12-28
snort ET SCAN Acunetix scan in progress acunetix variable in http_uri rev 1 2016-12-28
snort ET EXPLOIT Possible CVE-2016-10033 PHPMailer RCE Attempt rev 1 2016-12-27
snort ET CURRENT_EVENTS Successful Windows Live Phish 2016-12-23 rev 1 2016-12-23
snort ET TROJAN JS/WSF Downloader Dec 08 2016 M4 rev 2 2016-12-23
snort ET CURRENT_EVENTS Successful Google Drive Phish 2016-12-22 rev 1 2016-12-22
snort ET TROJAN Possible Linux.Mirai DaHua Default Credentials Login rev 1 2016-12-20
snort ET CURRENT_EVENTS Successful Dubai Islamic Internet Bank Phish 2016-12-20 rev 1 2016-12-20
snort ET TROJAN Win32/Braincrypt Ransomware CnC Checkin rev 1 2016-12-20
snort ET CURRENT_EVENTS Successful Etisalat Phish 2016-12-20 rev 1 2016-12-20
snort ET TROJAN AgentTesla PWS HTTP CnC Checkin rev 3 2016-12-19
snort ET CURRENT_EVENTS Successful Google Drive Phish 2016-10-12 rev 2 2016-12-19