Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Win32/Swrort.A Checkin 3 rev 1 2015-11-25
snort ET CURRENT_EVENTS Possible Evil Redirector Leading to EK June 10 2015 rev 10 2015-11-25
snort ET CURRENT_EVENTS Successful SFR Phishing 2015-11-24 rev 1 2015-11-24
snort ET CURRENT_EVENTS Successful Xoom Phishing 2015-11-24 rev 1 2015-11-24
snort ET CURRENT_EVENTS Successful Wildblue Phishing M2 2015-11-24 rev 1 2015-11-24
snort ET MOBILE_MALWARE Android/TrojanDropper.Agent.EP HTTP Host rev 1 2015-11-24
snort ET CURRENT_EVENTS Successful Wildblue Phishing M1 2015-11-24 rev 1 2015-11-24
snort ET TROJAN MegalodonHTTP CoinMiner Activity rev 2 2015-11-23
snort ET TROJAN MegalodonHTTP/LuciferHTTP Client Action rev 3 2015-11-23
snort ET TROJAN MegalodonHTTP CnC Checkin rev 2 2015-11-23
snort ET CURRENT_EVENTS Outlook Webmail Phishing Landing 2015-11-21 rev 1 2015-11-21
snort ET CURRENT_EVENTS Successful Natwest Bank Phish 2015-11-21 rev 1 2015-11-21
snort ET CURRENT_EVENTS Successful Outlook Webmail Phishing M2 2015-11-21 rev 1 2015-11-21
snort ET CURRENT_EVENTS Successful Wells Fargo Phish M1 2015-11-21 rev 1 2015-11-21
snort ET CURRENT_EVENTS Successful Wells Fargo Phish M2 2015-11-21 rev 1 2015-11-21
snort ET CURRENT_EVENTS Successful Outlook Webmail Phishing 2015-11-21 rev 1 2015-11-21
snort ET CURRENT_EVENTS Successful Squirrelmail Phishing 2015-11-20 rev 1 2015-11-20
snort ET POLICY IP Lookup Geoip.co.uk rev 1 2015-11-20
snort ET CURRENT_EVENTS Google Drive Phishing Landing 2015-11-20 rev 1 2015-11-20
snort ET CURRENT_EVENTS Successful Tradekey Phish 2015-11-19 rev 1 2015-11-19
snort ET CURRENT_EVENTS Successful Hinet Phish 2015-11-19 rev 1 2015-11-19
snort ET CURRENT_EVENTS Possible Evil Redirector Leading to EK Nov 09 2015 M2 rev 5 2015-11-18
snort ET CURRENT_EVENTS Google Drive Phishing Landing 2015-11-17 rev 1 2015-11-18
snort ET TROJAN BandarChor Ransomware Checkin rev 5 2015-11-17
snort ET CURRENT_EVENTS Metro Document Phishing Landing 2015-11-17 rev 1 2015-11-17
snort ET EXPLOIT Serialized Java Object Calling Common Collection Function rev 1 2015-11-17
snort ET EXPLOIT Serialized Groovy Java Object Generated by ysoserial rev 1 2015-11-17
snort ET EXPLOIT Serialized Spring Java Object Generated by ysoserial rev 1 2015-11-17
snort ET EXPLOIT Serialized Java Object Generated by ysoserial rev 1 2015-11-17
snort ET TROJAN Trojan.Nurjax Retrieving Domains via JS rev 2 2015-11-17
snort ET TROJAN Trojan-Ransom.Win32.Blocker.dham Checkin rev 1 2015-11-13
snort ET TROJAN Comfoo Outbound Communication rev 16 2015-11-13
snort ET TROJAN Operation Buhtrap CnC Beacon 2 rev 2 2015-11-13
snort ET CURRENT_EVENTS Mailbox Renewal Phish Landing Nov 13 rev 1 2015-11-13
snort ET TROJAN Poweliks Clickfraud CnC M4 rev 2 2015-11-12
snort ET CURRENT_EVENTS Evil Redirector Leading to EK September 04 2015 rev 2 2015-11-12
snort ET MOBILE_MALWARE Android Trojan Cloudsota HTTP Host rev 1 2015-11-12
snort ET TROJAN Possible Chimera Ransomware - Bitmessage Activity rev 1 2015-11-12
snort ET CURRENT_EVENTS Possible Evil Redirector Leading to EK Nov 09 2015 M1 rev 1 2015-11-11
snort ET TROJAN TinyLoader.B2 Checkin x64 rev 1 2015-11-11