Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN URI Struct Observed in Pawn Storm CVE-2015-2950 rev 1 2015-07-31
snort ET CURRENT_EVENTS DRIVEBY Possible Goon/Infinity/Magnitude EK SilverLight Exploit rev 2 2015-07-28
snort ET CURRENT_EVENTS ScanBox Jun 06 2015 M2 T1 rev 1 2015-07-28
snort ET CURRENT_EVENTS ScanBox Jun 06 2015 M3 T1 rev 1 2015-07-28
snort ET CURRENT_EVENTS ScanBox Jun 06 2015 M1 T1 rev 1 2015-07-28
snort ET TROJAN Backdoor.Win32.Xyligan Checkin rev 3 2015-07-24
snort ET TROJAN W2KM_BARTALEX Downloading Payload M2 rev 1 2015-07-24
snort ET TROJAN Java/QRat Checkin rev 1 2015-07-22
snort ET TROJAN Linux/DDoS.Sotdas/IptabLex Checkin rev 2 2015-07-21
snort ET WEB_SERVER IIS ISN BackDoor Command Get Logpath rev 5 2015-07-20
snort ET TROJAN Win32/Bancos.AMM CnC Beacon rev 3 2015-07-20
snort ET WEB_SERVER IIS ISN BackDoor Command Delete Log rev 5 2015-07-20
snort ET TROJAN Tsyrval Panda CnC Beacon rev 1 2015-07-20
snort ET TROJAN Possible CVE-2015-2424 RTF Dropping Sofacy rev 1 2015-07-17
snort ET TROJAN APT CozyCar SSL Cert 3 rev 1 2015-07-15
snort ET TROJAN W32/Banload.VZS Banker POST CnC Beacon 1 rev 1 2015-07-10
snort ET TROJAN W32/Banload.VZS Banker POST CnC Beacon 2 rev 1 2015-07-10
snort ET MOBILE_MALWARE Android BatteryBotPro Checkin 2 rev 2 2015-07-09
snort ET WEB_SPECIFIC_APPS WEB-PHP RCE PHPBB 2004-1315 rev 1 2015-07-07
snort ET TROJAN Win32/Denisca.A CnC Beacon rev 1 2015-07-07
snort ET TROJAN Win32/Denisca.A CnC Beacon 2 rev 1 2015-07-07
snort ET TROJAN W32/Kazy.325252 Variant CnC Beacon 2 rev 2 2015-07-06
snort ET TROJAN W32/Kazy.325252 Variant CnC Beacon 1 rev 2 2015-07-06
snort ET TROJAN Mocelpa Client Hello CnC Beacon rev 1 2015-07-06
snort ET CURRENT_EVENTS Possible Elasticsearch CVE-2015-1427 Exploit Campaign SSL Certificate rev 1 2015-06-26
snort ET TROJAN DDoS.XOR Checkin 2 rev 3 2015-06-24
snort ET TROJAN DDoS.XOR Checkin 3 rev 3 2015-06-24
snort ET TROJAN Backdoor.Elise CnC Beacon 3 M1 rev 3 2015-06-23
snort ET TROJAN Backdoor.Elise CnC Beacon 1 M2 rev 4 2015-06-23
snort ET TROJAN Win32/Keatep.B Checkin rev 6 2015-06-23
snort ET TROJAN Linux/ChinaZ DDoS Bot Checkin 2 rev 1 2015-06-22
snort ET CURRENT_EVENTS Suspicious JS Observed in Unknown EK Landing rev 1 2015-06-19
snort ET CURRENT_EVENTS Likely Malicious wininet UA Downloading EXE rev 1 2015-06-19
snort ET TROJAN Backdoor.Elise CnC Beacon 3 M2 rev 2 2015-06-19
snort ET CURRENT_EVENTS KaiXin Landing M4 rev 3 2015-06-18
snort ET CURRENT_EVENTS Likely Evil JS used in Unknown EK Landing rev 2 2015-06-14
snort ET TROJAN Possible Duqu 2.0 Request rev 1 2015-06-11
snort ET TROJAN Emotet v2 Exfiltrating Outlook information rev 2 2015-06-11
snort ET TROJAN Poweliks Clickfraud CnC M2 rev 1 2015-06-10
snort ET TROJAN Poweliks Clickfraud CnC M3 rev 1 2015-06-10