Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET DOS Terse HTTP GET Likely GoodBye 5.2 DDoS tool rev 2 2014-12-05
snort ET MOBILE_MALWARE Android/Code4hk.A Checkin rev 2 2014-12-05
snort ET POLICY Bitmessage Activity rev 2 2014-12-05
snort ET DOS Terse HTTP GET Likely AnonMafiaIC DDoS tool rev 2 2014-12-05
snort ET TROJAN Win32/Enchanim C2 Client Check-in rev 2 2014-12-05
snort ET ACTIVEX HP Easy Printer Care Software XMLCacheMgr ActiveX Control Remote Code Execution Attempt rev 2 2014-12-05
snort ET DOS Possible NTP DDoS Inbound Frequent Un-Authed PEER_LIST Requests IMPL 0x02 rev 3 2014-12-05
snort ET DOS Possible NTP DDoS Inbound Frequent Un-Authed GET_RESTRICT Requests IMPL 0x02 rev 3 2014-12-05
snort ET POLICY HTTP OPTIONS invalid method case outbound rev 2 2014-12-05
snort ET DOS Likely NTP DDoS In Progress GET_RESTRICT Response to Non-Ephemeral Port IMPL 0x02 rev 4 2014-12-05
snort ET DOS Possible NTP DDoS Inbound Frequent Un-Authed PEER_LIST Requests IMPL 0x03 rev 3 2014-12-05
snort ET TROJAN AlienSpy RAT Checkin Set rev 2 2014-12-05
snort ET EXPLOIT Zollard PHP Exploit Telnet Inbound rev 2 2014-12-05
snort ET DOS Possible NTP DDoS Inbound Frequent Un-Authed GET_RESTRICT Requests IMPL 0x03 rev 3 2014-12-05
snort ET WEB_CLIENT PDF With Hidden Embedded File rev 1 2014-12-03
snort ET TROJAN Linux/ShellshockCampaign.DDOSBot Execute Shell Command CnC Server Message rev 2 2014-12-03
snort ET INFO Microsoft Compact Office Document Format File Download rev 1 2014-12-02
snort ET TROJAN W32/Hyteod.Downloader CnC Beacon rev 1 2014-12-01
snort ET TROJAN Possible Regin Init CnC Beacon ICMP rev 1 2014-11-26
snort ET TROJAN Possible Regin Init CnC Beacon TCP rev 2 2014-11-26
snort ET TROJAN W32/DoubleTap.APT Downloader Socks5 Setup Request rev 2 2014-11-26
snort ET WEB_SERVER PHP.//Input in HTTP POST rev 3 2014-11-26
snort ET CURRENT_EVENTS KaiXin Landing Page Nov 25 2014 rev 1 2014-11-26
snort ET TROJAN Possible Regin Init CnC Beacon UDP rev 1 2014-11-26
snort ET MOBILE_MALWARE Android.Stealthgenie Checkin rev 1 2014-11-25
snort ET TROJAN CoinVault POST M2 rev 1 2014-11-24
snort ET TROJAN W32/AntiBreach Possible Activation Attempt rev 1 2014-11-21
snort ET TROJAN Rerdom/Asprox CnC Beacon rev 1 2014-11-20
snort ET WEB_SERVER FOX-SRT - Backdoor - CryptoPHP Shell C2 POST rev 1 2014-11-20
snort ET TROJAN ELF_BASHLITE.SMB Dropping Files rev 1 2014-11-19
snort ET TROJAN Sefnit Checkin rev 3 2014-11-19
snort ET TROJAN OSX/WireLurker HTTP Request for manhuaba.com.cn rev 2 2014-11-18
snort ET TROJAN DEEP PANDA Checkin 3 rev 4 2014-11-18
snort ET WEB_SERVER Possible CVE-2014-3120 Elastic Search Remote Code Execution Attempt rev 2 2014-11-17
snort ET TROJAN Windows executable base64 encoded in XML rev 8 2014-11-15
snort ET TROJAN Possible Asprox Pizza rev 1 2014-11-15
snort ET WEB_CLIENT Possible Internet Explorer VBscript failure to handle error case information disclosure obfuscated CVE-2014-6332 rev 1 2014-11-15
snort ET TROJAN OSX/WireLurker CnC Beacon rev 2 2014-11-12
snort ET TROJAN Emotet CnC Beacon rev 1 2014-11-12
snort ET TROJAN Possible Emotet DGA NXDOMAIN Responses rev 1 2014-11-12