Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET POLICY HTTP POST invalid method case outbound rev 3 2016-12-05
snort ET CURRENT_EVENTS Successful Paypal Phish M2 2016-12-05 rev 1 2016-12-05
snort ET WEB_SPECIFIC_APPS Joomla GoogleMaps Plugin Open Proxy Access rev 1 2016-12-02
snort ET CURRENT_EVENTS Successful Google Drive Phish M2 2016-12-02 rev 1 2016-12-02
snort ET CURRENT_EVENTS Successful Google Drive Phish M1 2016-12-02 rev 1 2016-12-02
snort ET CURRENT_EVENTS Successful Chase Phish 2016-12-01 rev 1 2016-12-01
snort ET TROJAN Sharik/Smoke Loader Receiving Payload rev 1 2016-11-30
snort ET TROJAN Sharik/Smoke Loader Microsoft Connectivity Check rev 5 2016-11-30
snort ET TROJAN Sharik/Smoke Loader Microsoft Connectivity check rev 2 2016-11-30
snort ET EXPLOIT Firefox 0-day used against TOR browser Nov 29 2016 M2 rev 1 2016-11-30
snort ET EXPLOIT CVE-2016-3210 Exploit Observed ITW M1 Nov 30 rev 1 2016-11-30
snort ET TROJAN Sharik/Smoke Loader Adobe Connectivity Check 2 rev 2 2016-11-30
snort ET EXPLOIT CVE-2016-3210 Exploit Observed ITW M1 Nov 30 rev 1 2016-11-30
snort ET TROJAN Sharik/Smoke Loader Adobe Connectivity check rev 3 2016-11-30
snort ET EXPLOIT Firefox 0-day used against TOR browser Nov 29 2016 M1 rev 1 2016-11-30
snort ET TROJAN Sharik/Smoke Loader Adobe Connectivity Check 3 rev 2 2016-11-30
snort ET TROJAN Sharik/Smoke Loader Java Connectivity Check rev 2 2016-11-30
snort ET EXPLOIT Eir D1000 Modem CWMP Exploit Retrieving Wifi Key rev 2 2016-11-29
snort ET CURRENT_EVENTS Successful XBOOMBER Paypal Phish Nov 28 2016 rev 1 2016-11-29
snort ET CURRENT_EVENTS Successful Personalized Adobe Online PDF Phish 2016-11-28 rev 1 2016-11-29
snort ET CURRENT_EVENTS Successful Paypal Phish M1 2016-11-29 rev 1 2016-11-29
snort ET CURRENT_EVENTS Terse POST to Wordpress Folder - Probable Successful Phishing M6 rev 1 2016-11-29
snort ET CURRENT_EVENTS Successful Microsoft Live Email Account Phish 2016-11-29 rev 1 2016-11-29
snort ET CURRENT_EVENTS Successful Paypal Phish M2 2016-11-29 rev 1 2016-11-29
snort ET CURRENT_EVENTS Successful Ourtime.com Phish 2016-11-28 rev 1 2016-11-28
snort ET CURRENT_EVENTS Successful Wells Fargo Phish 2016-11-28 rev 1 2016-11-28
snort ET CURRENT_EVENTS Successful Barclays Phish M1 2016-11-23 rev 1 2016-11-23
snort ET TROJAN Win32/TrojanDownloader.Delf.BXC CnC Beacon rev 1 2016-11-23
snort ET TROJAN Win32/VB.SDB CnC Beacon rev 1 2016-11-23
snort ET CURRENT_EVENTS Successful HM Revenue Phish 2016-11-23 rev 1 2016-11-23
snort ET CURRENT_EVENTS Successful Wells Fargo Phish M1 2016-09-30 rev 2 2016-11-22
snort ET TROJAN Win32/Ispen BADNEWS CnC Beacon rev 2 2016-11-21
snort ET CURRENT_EVENTS Successful Wells Fargo Phish M1 2016-11-18 rev 1 2016-11-18
snort ET TROJAN JS/Nemucod requesting EXE payload 2016-01-28 rev 5 2016-11-18
snort ET TROJAN KeyBoy CnC Beacon rev 1 2016-11-18
snort ET CURRENT_EVENTS Successful Generic Wembail Phish M2 2016-11-18 rev 1 2016-11-18
snort ET CURRENT_EVENTS Successful Office 365 Phish 2016-11-18 rev 1 2016-11-18
snort ET WEB_SERVER Possible Apache Struts OGNL Expression Injection rev 1 2016-11-18
snort ET CURRENT_EVENTS Successful Wells Fargo Phish M2 2016-11-18 rev 1 2016-11-18
snort ET CURRENT_EVENTS Successful Email Settings Error Phish 2016-11-17 rev 1 2016-11-17