Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Win32/Injector.BXEW Variant HTTP CnC Beacon 2 rev 1 2015-04-02
snort ET TROJAN Win32/Injector.BXEW Variant HTTP CnC Beacon 3 rev 1 2015-04-02
snort ET TROJAN Skyfall fake Skype install link rev 2 2015-04-01
snort ET POLICY Remote Access - RView - Host - *.rview.com rev 1 2015-03-31
snort ET TROJAN Volatile Cedar Win32.Explosive CnC Beacon 3 rev 1 2015-03-31
snort ET TROJAN Vawtrak/NeverQuest Server Response rev 3 2015-03-27
snort ET TROJAN Win32/Teslacrypt Ransomware HTTP CnC Beacon M1 rev 3 2015-03-27
snort ET EXPLOIT Metasploit Browser Exploit Server Plugin Detect rev 3 2015-03-26
snort ET EXPLOIT Metasploit Plugin-Detect Posting Data 7 rev 1 2015-03-26
snort ET EXPLOIT Metasploit Plugin-Detect Posting Data 6 rev 1 2015-03-26
snort ET EXPLOIT Metasploit Browser Exploit Server Plugin Detect 2 rev 1 2015-03-26
snort ET EXPLOIT Metasploit Plugin-Detect Posting Data 5 rev 1 2015-03-26
snort ET TROJAN Win32/TrojanProxy.JpiProx.B CnC Beacon 1 rev 1 2015-03-25
snort ET TROJAN Win32/TrojanProxy.JpiProx.B CnC Beacon 2 rev 1 2015-03-25
snort ET MOBILE_MALWARE Android.Trojan.SMSSend.Y rev 4 2015-03-23
snort ET TROJAN Linux.DDoS Checkin rev 4 2015-03-23
snort ET TROJAN KeyLogger related to FindPOS CnC Beacon rev 1 2015-03-21
snort ET CURRENT_EVENTS RIG Payload URI Struct March 20 2015 rev 1 2015-03-21
snort ET TROJAN FindPOS Checkin rev 2 2015-03-21
snort ET TROJAN Win32/Teslacrypt Ransomware HTTP CnC Beacon M2 rev 2 2015-03-20
snort ET TROJAN RocketKitten APT Checkin rev 2 2015-03-19
snort ET TROJAN MWI Maldoc Exploit Kit Stats Callout rev 2 2015-03-18
snort ET DOS Bittorrent User-Agent inbound - possible DDOS rev 1 2015-03-18
snort ET WEB_CLIENT Microsoft Office RTF Stack Buffer Overflow rev 5 2015-03-18
snort ET WEB_SERVER Possible CVE-2015-1427 Elastic Search Sandbox Escape Remote Code Execution Attempt rev 2 2015-03-17
snort ET TROJAN US-CERT TA14-353A Lightweight Backdoor 10 rev 2 2015-03-16
snort ET TROJAN Tinba Checkin 3 rev 2 2015-03-14
snort ET TROJAN Gamarue/Andromeda Downloading Payload rev 1 2015-03-12
snort ET TROJAN Ursnif Checkin rev 2 2015-03-12
snort ET TROJAN Possible malicious Office doc hidden in XML file rev 1 2015-03-10
snort ET TROJAN Banker Boleto Fraud JS_BROBAN.SM Checkin 3 rev 2 2015-03-10
snort ET POLICY Pandora Usage rev 2 2015-03-07
snort ET CURRENT_EVENTS Unknown Malicious Second Stage Download URI Struct M2 Feb 06 2015 rev 1 2015-03-07
snort ET EXPLOIT Seagate Business NAS Unauthenticated Remote Command Execution rev 2 2015-03-04
snort ET TROJAN LogPOS Sending Data rev 1 2015-03-04
snort ET EXPLOIT PCMan FTP Server 2.0.7 Remote Command Execution rev 2 2015-03-03
snort ET POLICY Privdog Update check rev 1 2015-02-27
snort ET POLICY Privdog Activation rev 1 2015-02-27
snort ET WEB_SERVER WebShell - ASPyder - File Create - POST Structure rev 3 2015-02-26
snort ET TROJAN Unknown Trojan Downloading PE via MSSQL Connection to Non-Standard Port rev 1 2015-02-25