Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Linux/Xnote Keep-Alive rev 1 2015-02-11
snort ET TROJAN Win32/Rovnix.J Checkin 2 rev 3 2015-02-11
snort ET TROJAN ELF/Mayhem Checkin rev 2 2015-02-10
snort ET POLICY SUSPICIOUS *.rar.exe in HTTP URL rev 1 2015-02-09
snort ET TROJAN Skeleton Key Filename in SMB2 Traffic rev 5 2015-02-07
snort ET TROJAN DDoS.XOR Checkin rev 3 2015-02-07
snort ET TROJAN Skeleton Key Filename in SMB2 Traffic rev 2 2015-02-07
snort ET TROJAN Skeleton Key Filename in SMB2 Traffic rev 4 2015-02-07
snort ET TROJAN Sakula/Mivast C2 Activity rev 1 2015-02-06
snort ET WEB_SPECIFIC_APPS FancyBox Remote Code Inclusion POST Request rev 2 2015-02-05
snort ET MOBILE_MALWARE IOS_XAGENT UA rev 1 2015-02-05
snort ET WEB_SERVER WPScan User Agent rev 2 2015-02-04
snort ET MOBILE_MALWARE Android Syria-Twitter Checkin rev 1 2015-02-03
snort ET MOBILE_MALWARE Android/SMSThief.F Banker CnC Beacon rev 1 2015-02-03
snort ET TROJAN ArcDoor Intial Checkin rev 1 2015-02-03
snort ET TROJAN W32/Asprox php.dll.crp POST CnC Beacon rev 4 2015-02-02
snort ET WEB_SPECIFIC_APPS Wordpress PingBack Possible GHOST attempt rev 4 2015-01-30
snort ET POLICY Onion2Web Tor Proxy Cookie rev 1 2015-01-28
snort ET TROJAN KL-Remote / Cryp_Banker14 RAT response rev 1 2015-01-27
snort ET TROJAN KL-Remote / Cryp_Banker14 RAT connection rev 1 2015-01-27
snort ET TROJAN W32/Adrom.Backdoor CnC Beacon rev 1 2015-01-23
snort ET TROJAN W32/Upatre.Downloader Encoded Binary Download Request rev 1 2015-01-23
snort ET TROJAN W32/AGENT.NXNX Checkin 2 rev 2 2015-01-23
snort ET TROJAN Win32/Scieron-A Checkin via HTTP POST rev 1 2015-01-23
snort ET TROJAN Backdoor.TurlaCarbon.A C2 HTTP Request rev 1 2015-01-22
snort ET TROJAN Inception APT malware rev 1 2015-01-22
snort ET TROJAN CryptoWall CryptoWall 3.0 Check-in rev 2 2015-01-21
snort ET TROJAN Win32.ChinaZ.DDoSClient Checkin rev 2 2015-01-20
snort ET TROJAN ISRStealer Checkin rev 7 2015-01-19
snort ET TROJAN Filename hkcmd.exe Download - Common Hostile Filename rev 2 2015-01-16
snort ET TROJAN Filename explorer.exe Download - Common Hostile Filename rev 5 2015-01-16
snort ET TROJAN Filename svchost.exe Download - Common Hostile Filename rev 4 2015-01-16
snort ET TROJAN Filename server.exe Download - Common Hostile Filename rev 1 2015-01-16
snort ET TROJAN Linux/ChinaZ DDoS Bot Checkin rev 1 2015-01-15
snort ET TROJAN Possible Office Doc with Embedded VBA containing Reverse Meterpreter Shell rev 3 2015-01-13
snort ET TROJAN Known Sinkhole Response Header CERT.PL rev 1 2015-01-13
snort ET TROJAN Linux/DDoS.M Admin console status rev 1 2015-01-13
snort ET TROJAN Hong Kong SWC Attack PcClient CnC Beacon rev 1 2015-01-13
snort ET TROJAN Vawtrak/NeverQuest Posting Data rev 1 2015-01-09
snort ET WEB_SERVER PHP System Command in HTTP POST rev 3 2015-01-08