Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Win32/7ev3n Ransomware Initial Checkin rev 1 2016-01-22
snort ET TROJAN Win32/7ev3n Ransomware Process Checkin rev 1 2016-01-22
snort ET WEB_CLIENT Suspicious LastPass URI Structure - Possible Phishing rev 1 2016-01-19
snort ET CURRENT_EVENTS Successful Paypal Phish 2016-01-15 M2 rev 1 2016-01-19
snort ET WEB_CLIENT Chrome Extension Phishing HTTP Request rev 1 2016-01-19
snort ET CURRENT_EVENTS Successful Paypal Phish M1 2016-01-19 rev 1 2016-01-19
snort ET CURRENT_EVENTS Successful Paypal Phish 2016-01-15 M3 rev 1 2016-01-19
snort ET EXPLOIT Possible CVE-2016-0777 Server Advertises Suspicious Roaming Support rev 1 2016-01-15
snort ET P2P MS WUDO Peer Sync rev 1 2016-01-15
snort ET CURRENT_EVENTS Webmail Update Phishing Landing 2016-01-15 rev 1 2016-01-15
snort ET CURRENT_EVENTS Successful Formbuddy Credential Phish Submission 2016-01-15 rev 1 2016-01-15
snort ET CURRENT_EVENTS IRS Phishing Landing 2016-01-15 rev 1 2016-01-15
snort ET EXPLOIT Possible CVE-2016-0777 Client Sent Roaming Resume Request rev 2 2016-01-15
snort ET TROJAN ELF.STD.ddos Checkin rev 2 2016-01-14
snort ET WEB_SERVER WEBSHELL JSP/Backdoor Shell Access rev 2 2016-01-14
snort ET TROJAN FakeM RAT CnC Beacon rev 5 2016-01-14
snort ET TROJAN TrochilusRAT CnC Beacon 1 rev 3 2016-01-13
snort ET TROJAN Win32/Agent.XST Checkin rev 1 2016-01-13
snort ET TROJAN TrochilusRAT CnC Beacon 2 rev 2 2016-01-13
snort ET CURRENT_EVENTS Successful Google Drive Phish 2016-01-12 rev 1 2016-01-12
snort ET TROJAN Win32/Bulta CnC Beacon rev 2 2016-01-09
snort ET CURRENT_EVENTS Successful Wells Fargo Phish Loading Page 2016-01-07 rev 1 2016-01-08
snort ET CURRENT_EVENTS Wells Fargo Phishing Landing 2016-01-07 rev 1 2016-01-08
snort ET TROJAN ELF.MrBlack DOS.TF Variant rev 2 2016-01-07
snort ET TROJAN Cryptojoker Checkin rev 1 2016-01-06
snort ET TROJAN Zbot download config - SET rev 1 2015-12-30
snort ET WEB_CLIENT PHOEN!X Phish Loading Page 2015-12-29 rev 1 2015-12-29
snort ET CURRENT_EVENTS PHOEN!X Apple Phish Landing Page 2015-12-29 rev 1 2015-12-29
snort ET WEB_CLIENT Anonisma Paypal Phishing Loading Page 2015-12-29 rev 1 2015-12-29
snort ET CURRENT_EVENTS Successful PHOEN!X Apple Phish M1 2015-12-29 rev 1 2015-12-29
snort ET CURRENT_EVENTS Successful Paypal Phish 2015-12-24 M1 rev 1 2015-12-25
snort ET TROJAN Powersploit Framework Script Downloaded rev 1 2015-12-24
snort ET TROJAN ASCII Executable Inside of MSCOFF File DL Over HTTP rev 2 2015-12-23
snort ET WEB_SERVER WeBaCoo Web Backdoor Detected rev 1 2015-12-22
snort ET CURRENT_EVENTS Successful US Bank Phish M1 2015-12-22 rev 1 2015-12-22
snort ET CURRENT_EVENTS Successful US Bank Phish M2 2015-12-22 rev 1 2015-12-22
snort ET POLICY FOX-SRT - Juniper ScreenOS SSH World Reachable rev 2 2015-12-22
snort ET EXPLOIT Juniper ScreenOS telnet Backdoor Default Password Attempt rev 1 2015-12-21
snort ET MOBILE_MALWARE Trojan-Banker.AndroidOS.Acecard.c Checkin rev 3 2015-12-21
snort ET TROJAN FAKBEN Ransomware rev 2 2015-12-18