Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN Win32/Emotet.C Checkin rev 6 2015-01-08
snort ET TROJAN Mini/Cosmic Duke variant FTP upload rev 1 2015-01-08
snort ET WEB_SERVER PHP System Command in HTTP POST rev 3 2015-01-08
snort ET TROJAN TinyLoader.A Checkin x86 rev 1 2015-01-07
snort ET TROJAN TinyLoader.A Checkin x64 rev 1 2015-01-07
snort ET TROJAN Steam Stealer rev 2 2015-01-07
snort ET WEB_SERVER ATTACKER WebShell - 1337w0rm - Landing Page rev 1 2015-01-06
snort ET WEB_SERVER ATTACKER WebShell - 1337w0rm - cPanel Cracker rev 1 2015-01-06
snort ET EXPLOIT Possible Misfortune Cookie RomPager Server banner rev 1 2015-01-06
snort ET ATTACK_RESPONSE SysInternals sc.exe Output Outbound rev 1 2015-01-05
snort ET TROJAN Trojan.Generic.5325921 Checkin rev 4 2015-01-05
snort ET ATTACK_RESPONSE Microsoft CScript Banner Outbound rev 1 2015-01-05
snort ET ATTACK_RESPONSE Microsoft Netsh Firewall Disable Output Outbound rev 1 2015-01-05
snort ET ATTACK_RESPONSE Microsoft WMIC Prompt Outbound rev 1 2015-01-05
snort ET WEB_SPECIFIC_APPS ManageEngine Desktop Central Administrator Account Creation rev 1 2015-01-05
snort ET TROJAN Win64/Havex Checkin rev 1 2014-12-30
snort ET TROJAN Andromeda Checkin Dec 29 2014 rev 1 2014-12-29
snort ET TROJAN Kronos Checkin M2 rev 1 2014-12-29
snort ET TROJAN US-CERT TA14-353A Lightweight Backdoor 5 rev 1 2014-12-23
snort ET TROJAN US-CERT TA14-353A Proxy Tool 1 rev 1 2014-12-23
snort ET TROJAN US-CERT TA14-353A Wiper 2 rev 1 2014-12-23
snort ET TROJAN US-CERT TA14-353A Listening Implant 7 rev 1 2014-12-23
snort ET TROJAN Trojan.Nurjax Downloading PE rev 1 2014-12-23
snort ET TROJAN US-CERT TA14-353A Lightweight Backdoor 2 rev 1 2014-12-23
snort ET TROJAN US-CERT TA14-353A Lightweight Backdoor 9 rev 1 2014-12-23
snort ET TROJAN Trojan.Nurjax Checkin rev 1 2014-12-23
snort ET TROJAN US-CERT TA14-353A Lightweight Backdoor 6 rev 1 2014-12-23
snort ET TROJAN US-CERT TA14-353A Lightweight Backdoor 1 rev 1 2014-12-23
snort ET TROJAN Win32/Spy.Agent.OHT - AnunakAPT TCP Checkin 1 rev 2 2014-12-23
snort ET TROJAN US-CERT TA14-353A Lightweight Backdoor 8 rev 1 2014-12-23
snort ET TROJAN US-CERT TA14-353A Lightweight Backdoor 4 rev 1 2014-12-23
snort ET TROJAN US-CERT TA14-353A Proxy Tool 2 rev 1 2014-12-23
snort ET TROJAN US-CERT TA14-353A Listening Implant 6 rev 1 2014-12-23
snort ET TROJAN Win32/Spy.Agent.OHT - AnunakAPT TCP Keep-Alive rev 2 2014-12-23
snort ET TROJAN Linux/Ssemgrvd sshd Backdoor HTTP CNC 2 rev 4 2014-12-18
snort ET SCAN Acunetix Accept HTTP Header detected scan in progress rev 1 2014-12-18
snort ET TROJAN Win32/Poweliks.A Checkin 2 rev 1 2014-12-18
snort ET TROJAN Win32/Spy.Banker.AAXV Retrieving key from Pinterest rev 2 2014-12-18
snort ET CURRENT_EVENTS Evil Flash Redirector to RIG EK Dec 17 2014 rev 1 2014-12-18
snort ET TROJAN ZhCAT.HackTool Operation Cleaver HTTP CnC Beacon rev 3 2014-12-17