Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SERVER ATTACKER WebShell - Weevely - Cookie rev 1 2015-02-24
snort ET TROJAN Likely Arid Viper APT Advtravel Campaign POST rev 4 2015-02-20
snort ET TROJAN Likely Arid Viper APT Advtravel Campaign GET Keepalive rev 4 2015-02-20
snort ET TROJAN Carbanak APT CnC Beacon 1 rev 2 2015-02-20
snort ET CURRENT_EVENTS KaiXin Landing M3 rev 2 2015-02-20
snort ET CURRENT_EVENTS KaiXin Secondary Landing Page M2 rev 2 2015-02-20
snort ET TROJAN SuperFish CnC Beacon 1 rev 1 2015-02-20
snort ET TROJAN SuperFish CnC Beacon 2 rev 2 2015-02-20
snort ET CURRENT_EVENTS DRIVEBY GENERIC ShellExecute in Hex No Seps rev 1 2015-02-19
snort ET CURRENT_EVENTS DRIVEBY GENERIC ShellExecute in URLENCODE rev 1 2015-02-19
snort ET TROJAN Win32.Beaugrit.gen.AAAA rev 1 2015-02-19
snort ET CURRENT_EVENTS DRIVEBY GENERIC CollectGarbage in Hex String No Seps rev 1 2015-02-19
snort ET TROJAN Possible Babar POST Request rev 1 2015-02-19
snort ET EXPLOIT Generic ADSL Router DNS Change GET Request rev 1 2015-02-19
snort ET EXPLOIT Generic ADSL Router DNS Change POST Request rev 1 2015-02-19
snort ET EXPLOIT Possible ShuttleTech 915WM DNS Change Attempt rev 1 2015-02-19
snort ET EXPLOIT Possible dlink-DSL2640B DNS Change Attempt rev 1 2015-02-19
snort ET CURRENT_EVENTS Possible CVE-2014-6332 DECS2 rev 2 2015-02-18
snort ET TROJAN Arid Viper APT Transmitting Serial rev 1 2015-02-17
snort ET TROJAN Arid Viper APT Exfiltrating files rev 1 2015-02-17
snort ET TROJAN Arid Viper APT Checkin 2 rev 1 2015-02-17
snort ET TROJAN Arid Viper APT Transmitting Date rev 1 2015-02-17
snort ET TROJAN Arid Viper APT File information rev 1 2015-02-17
snort ET TROJAN Arid Viper APT Checking filename rev 1 2015-02-17
snort ET TROJAN Carbanak APT CnC Beacon 2 rev 1 2015-02-17
snort ET TROJAN Arid Viper APT Checkin 1 rev 1 2015-02-17
snort ET CURRENT_EVENTS Unknown EK Landing Feb 16 2015 b64 2 M2 rev 1 2015-02-16
snort ET CURRENT_EVENTS Unknown EK Landing Feb 16 2015 b64 3 M2 rev 1 2015-02-16
snort ET CURRENT_EVENTS Unknown EK Landing Feb 16 2015 b64 2 M1 rev 1 2015-02-16
snort ET TROJAN Upatre Common URI Struct Dec 01 2014 rev 7 2015-02-13
snort ET DOS MC-SQLR Response Inbound Possible DDoS Target rev 3 2015-02-13
snort ET DOS MC-SQLR Response Outbound Possible DDoS Participation rev 4 2015-02-13
snort ET POLICY I2P Retrieving reseed info rev 2 2015-02-12
snort ET TROJAN Predator Pain Keylogger FTP rev 1 2015-02-12
snort ET POLICY I2P Seeds File Download rev 1 2015-02-12
snort ET POLICY I2P Seeds File Request rev 1 2015-02-12
snort ET TROJAN MSIL/Golroted.B Keylogger FTP rev 1 2015-02-12
snort ET TROJAN Mazilla Suspicious User-Agent Jan 15 2015 rev 3 2015-02-12
snort ET TROJAN Win32/Rovnix.J Checkin 2 rev 3 2015-02-11
snort ET TROJAN Linux/Xnote Keep-Alive rev 1 2015-02-11