Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET CURRENT_EVENTS Successful Apple Phishing 2016-03-01 M5 rev 1 2016-03-01
snort ET SCAN MySQL Malicious Scanning 2 rev 1 2016-03-01
snort ET CURRENT_EVENTS Apple Phishing Landing 2016-03-01 M2 rev 1 2016-03-01
snort ET SCAN MySQL Malicious Scanning 1 rev 1 2016-03-01
snort ET CURRENT_EVENTS Apple Phishing Landing 2016-03-01 M3 rev 1 2016-03-01
snort ET CURRENT_EVENTS USAA Phishing Landing 2016-02-26 rev 1 2016-02-29
snort ET CURRENT_EVENTS EITest Evil Redirect Leading to EK Feb 01 2016 rev 2 2016-02-26
snort ET TROJAN Likely PadCrypt Locker PKG DL rev 1 2016-02-26
snort ET CURRENT_EVENTS Successful Maersk Phishing 2016-02-25 rev 1 2016-02-25
snort ET POLICY Logmein.com/Join.me SSL Remote Control Access rev 1 2016-02-22
snort ET EXPLOIT Possible CVE-2015-7547 Long Response to A lookup rev 1 2016-02-18
snort ET TROJAN Possible OceanLotus Time Check to Microsoft.com rev 1 2016-02-18
snort ET P2P BitTorrent - Torrent File Downloaded rev 3 2016-02-18
snort ET EXPLOIT Possible CVE-2015-7547 Long Response to AAAA lookup rev 1 2016-02-18
snort ET TROJAN Possible OceanLotus CnC Heartbeat rev 1 2016-02-18
snort ET TROJAN Possible OceanLotus C2 Checkin rev 1 2016-02-18
snort ET CURRENT_EVENTS Successful Google Credential Phish 2016-02-17 rev 1 2016-02-17
snort ET CURRENT_EVENTS Google Maps Phishing Landing 2016-02-17 rev 1 2016-02-17
snort ET CURRENT_EVENTS Possible Phishing Landing - Data URI Inline Javascript 2016-02-09 rev 1 2016-02-17
snort ET CURRENT_EVENTS Successful Mailbox Update Phish 2016-02-17 M2 rev 1 2016-02-17
snort ET EXPLOIT D-Link DCS-930L Remote Command Execution attempt rev 1 2016-02-13
snort ET CURRENT_EVENTS Successful WZ-REKLAMA Phish 2016-01-08 rev 3 2016-02-11
snort ET TROJAN Possible Banload Downloading Executable rev 2 2016-02-11
snort ET CURRENT_EVENTS USPS Phishing Landing 2016-02-10 rev 1 2016-02-11
snort ET TROJAN Win32/Fluxer CnC Checkin rev 1 2016-02-05
snort ET TROJAN Download Request Containing Suspicious Filename - Crypted rev 1 2016-02-04
snort ET TROJAN Linux/ChinaZ 2.0 DDoS Bot Checkin 3 rev 2 2016-02-03
snort ET CURRENT_EVENTS Evil Redirect Compromised WP Feb 01 2016 rev 1 2016-02-02
snort ET CURRENT_EVENTS Phishing Landing via Webeden.co.uk M1 2016-01-22 rev 3 2016-02-02
snort ET CURRENT_EVENTS Successful Navy Federal Credit Union Phish 2016-02-01 rev 1 2016-02-01
snort ET CURRENT_EVENTS Navy Federal Credit Union Phishing Landing 2016-01-30 rev 1 2016-02-01
snort ET TROJAN CenterPOS Load Plugins rev 1 2016-01-29
snort ET TROJAN CenterPOS CnC rev 1 2016-01-29
snort ET TROJAN CenterPOS User Agent Observed rev 1 2016-01-29
snort ET SCAN Possible WordPress xmlrpc.php BruteForce in Progress - Response rev 3 2016-01-29
snort ET TROJAN CenterPOS Delete Plugins rev 1 2016-01-29
snort ET TROJAN CenterPOS CnC 2 rev 1 2016-01-29
snort ET CURRENT_EVENTS Successful Workspace Phish 2016-01-26 rev 1 2016-01-26
snort ET TROJAN Win32/Kaicone.A Checkin via HTTP POST rev 1 2016-01-26
snort ET CURRENT_EVENTS Canada Revenue Agency Phishing Landing 2016-01-25 rev 2 2016-01-25