Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CURRENT_EVENTS Mailbox Upgrade Phishing Landing 2016-06-27 rev 1 2016-06-27
snort ET CURRENT_EVENTS Successful Mailbox Upgrade Phish 2016-06-27 M1 rev 1 2016-06-27
snort ET CURRENT_EVENTS Successful Mailbox Upgrade Phish 2016-06-27 M2 rev 1 2016-06-27
snort ET WEB_CLIENT Possible Phishing Data Submitted to yolasite.com rev 1 2016-06-24
snort ET CURRENT_EVENTS Successful Vmware/Zimbra Phish 2015-09-28 rev 3 2016-06-23
snort ET INFO NBNS Name Query Response Possible WPAD Spoof BadTunnel rev 1 2016-06-23
snort ET INFO WinHttp AutoProxy Request wpad.dat Possible BadTunnel rev 1 2016-06-23
snort ET CURRENT_EVENTS Successful Wildblue/CenturyLink Phish 2015-12-08 rev 3 2016-06-23
snort ET CURRENT_EVENTS Microsoft Encrypted Email Phishing Landing 2016-06-23 rev 1 2016-06-23
snort ET CURRENT_EVENTS Email Termination Phishing Landing 2016-06-22 rev 1 2016-06-22
snort ET CURRENT_EVENTS Webmail Phishing Landing 2016-06-22 rev 1 2016-06-22
snort ET WEB_SERVER Apache Continuum Arbitrary Command Execution rev 2 2016-06-22
snort ET TROJAN JKDDOS Bot CnC Phone Home Message rev 3 2016-06-21
snort ET CURRENT_EVENTS Terse POST to Wordpress Folder - Probable Successful Phishing M3 rev 1 2016-06-16
snort ET TROJAN JS/RAA Ransomware check-in rev 1 2016-06-15
snort ET TROJAN FOX-SRT ShimRatReporter check-in rev 1 2016-06-15
snort ET WEB_CLIENT Google Chrome Pdfium JPEG2000 Heap Overflow rev 1 2016-06-13
snort ET TROJAN Bolek HTTP Checkin rev 1 2016-06-10
snort ET TROJAN Win32/Zeprox.B Checkin rev 4 2016-06-10
snort ET CURRENT_EVENTS Successful US Bank Phish 2016-06-09 M2 rev 1 2016-06-09
snort ET CURRENT_EVENTS Successful US Bank Phish 2016-06-09 M1 rev 1 2016-06-09
snort ET TROJAN Qarallax RAT Keepalive C2 rev 1 2016-06-08
snort ET CURRENT_EVENTS Successful DrSpam Phish 2016-06-08 M2 rev 1 2016-06-08
snort ET CURRENT_EVENTS DrSpam Phishing Landing 2016-06-08 rev 1 2016-06-08
snort ET CURRENT_EVENTS Successful DrSpam Phish 2016-06-08 M1 rev 1 2016-06-08
snort ET CURRENT_EVENTS DrSpam Phishing Landing CSS 2016-06-08 rev 1 2016-06-08
snort ET TROJAN BandarChor/CryptON Ransomware Checkin rev 2 2016-06-08
snort ET TROJAN Qarallax RAT Downloading Modules rev 1 2016-06-08
snort ET SCADA CitectSCADA ODBC Overflow Attempt rev 8 2016-06-07
snort ET TROJAN FastPOS RAM Scraper Sending Details rev 1 2016-06-07
snort ET TROJAN FastPOS Sending Keystrokes rev 1 2016-06-07
snort ET TROJAN FastPOS Software Update Request rev 1 2016-06-06
snort ET TROJAN FastPOS Initial Checkin rev 1 2016-06-06
snort ET TROJAN FastPOS Successful Software Update Request rev 1 2016-06-06
snort ET TROJAN FastPOS Sending Status Logs rev 1 2016-06-06
snort ET TROJAN FastPOS Reporting Error Code rev 1 2016-06-06
snort ET TROJAN FastPOS Version Checkin rev 1 2016-06-06
snort ET WEB_SERVER Aribitrary File Upload Vulnerability in WP Mobile Detector rev 1 2016-06-03
snort ET CURRENT_EVENTS Successful Excel Shared Document Phish 2016-06-02 rev 1 2016-06-02
snort ET CURRENT_EVENTS Successful Email Login Phish 2016-06-02 rev 1 2016-06-02