Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET POLICY Exe32Pack Packed Executable Download rev 1 2015-04-15
snort ET ATTACK_RESPONSE Matahari client rev 12 2015-04-15
snort ET TROJAN Win32/Ruckguv.A Requesting Payload rev 1 2015-04-14
snort ET TROJAN CoinVault CnC Beacon M2 rev 1 2015-04-14
snort ET TROJAN LankerBoy HTTP CnC Beacon rev 1 2015-04-14
snort ET TROJAN CoinVault CnC Beacon M1 rev 1 2015-04-14
snort ET TROJAN Possible APT30 or Win32/Nuclear HTTP Framework POST rev 3 2015-04-13
snort ET CURRENT_EVENTS DRIVEBY EXE Embeded in Page Likely Evil M2 rev 1 2015-04-11
snort ET CURRENT_EVENTS DRIVEBY EXE Embeded in Page Likely Evil M1 rev 1 2015-04-11
snort ET EXPLOIT FritzBox RCE GET Request rev 2 2015-04-09
snort ET EXPLOIT Belkin G F5D7230-4 Router DNS Change GET Request rev 1 2015-04-09
snort ET EXPLOIT Tenda ADSL2/2+ Router DNS Change GET Request rev 1 2015-04-09
snort ET EXPLOIT Netgear DGN1000B Router DNS Change GET Request rev 1 2015-04-09
snort ET EXPLOIT D-link DI604 Known Malicious Router DNS Change GET Request rev 1 2015-04-09
snort ET EXPLOIT Known Malicious Router DNS Change GET Request rev 1 2015-04-09
snort ET EXPLOIT Netgear WNDR Router DNS Change POST Request rev 2 2015-04-09
snort ET EXPLOIT TP-LINK Known Malicious Router DNS Change GET Request rev 1 2015-04-09
snort ET EXPLOIT ASUS RT N56U Router DNS Change GET Request 3 rev 1 2015-04-09
snort ET EXPLOIT Belkin Wireless G Router DNS Change POST Request rev 3 2015-04-09
snort ET TROJAN Kriptovor SMTP Traffic rev 1 2015-04-09
snort ET EXPLOIT TP-LINK TL-WR841N Router DNS Change GET Request rev 1 2015-04-09
snort ET EXPLOIT FritzBox RCE POST Request rev 2 2015-04-09
snort ET EXPLOIT Linksys WRT54GL DNS Change GET Request rev 1 2015-04-09
snort ET EXPLOIT TP-LINK TL-WR750N DNS Change GET Request rev 1 2015-04-09
snort ET EXPLOIT TP-LINK TL-WR340G Router DNS Change GET Request rev 1 2015-04-08
snort ET TROJAN TinyLoader.B1 Checkin x86 rev 2 2015-04-08
snort ET EXPLOIT Motorola SBG900 Router DNS Change GET Request rev 1 2015-04-08
snort ET EXPLOIT ASUS RT N56U Router DNS Change GET Request 1 rev 1 2015-04-08
snort ET EXPLOIT ASUS RT N56U Router DNS Change GET Request 2 rev 1 2015-04-08
snort ET EXPLOIT Linksys WRT54GL Router DNS Change POST Request rev 1 2015-04-08
snort ET SCAN H.323 Scanning device rev 2 2015-04-08
snort ET TROJAN TinyLoader.B1 Checkin x64 rev 1 2015-04-08
snort ET TROJAN TinyLoader.B1 Sending Processes rev 1 2015-04-08
snort ET TROJAN TinyLoader.B2 Checkin no architecture rev 1 2015-04-08
snort ET TROJAN Possible Win32/SillyFDC WordPress Traffic rev 1 2015-04-07
snort GPL TELNET Bad Login rev 11 2015-04-06
snort ET TROJAN Win32/Kelihos.F exe Download 2 rev 3 2015-04-03
snort ET TROJAN Miniduke variant C&C activity rev 2 2015-04-03
snort ET TROJAN Hangover related campaign Response rev 2 2015-04-03
snort ET TROJAN Win32/Injector.BXEW Variant HTTP CnC Beacon 3 rev 1 2015-04-02