Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET POLICY HTTP Request to a *.dlinkddns.com domain rev 3 2014-09-13
snort ET POLICY HTTP Request to a *.co.be domain rev 4 2014-09-13
snort ET TROJAN Possible Worm W32.Svich or Other Infection Request for setting.doc rev 2 2014-09-12
snort ET POLICY HTTP Request to a *.ae.am domain rev 2 2014-09-12
snort ET POLICY HTTP Request to a *.cw.cm domain rev 3 2014-09-12
snort ET TROJAN Stobox Connectivity Check rev 3 2014-09-12
snort ET TROJAN Suspicious bot.exe Request rev 3 2014-09-12
snort ET TROJAN Ponmocup C2 Post-infection Checkin rev 9 2014-09-12
snort ET TROJAN Slugin.A PatchTimeCheck.dat Request rev 3 2014-09-12
snort ET POLICY HTTP Request to a *.noc.su domain rev 2 2014-09-12
snort ET TROJAN Possible Worm W32.Svich or Other Infection Request for setting.xls rev 2 2014-09-12
snort ET POLICY HTTP Request to a *.vv.cc domain rev 3 2014-09-12
snort ET TROJAN DoS.Linux/Elknot.E Checkin rev 2 2014-09-12
snort ET POLICY HTTP Request to a *.be.ma domain rev 2 2014-09-12
snort ET POLICY HTTP Request to a *.co.tv domain rev 2 2014-09-12
snort ET TROJAN Known Hostile Domain .ntkrnlpa.info Lookup rev 3 2014-09-12
snort ET TROJAN Rogue AV Downloader concat URI rev 5 2014-09-12
snort ET TROJAN Suspicious flash_player.exe Download rev 2 2014-09-12
snort ET DOS LOIC POST rev 3 2014-09-12
snort ET DOS LOIC GET rev 2 2014-09-12
snort ET TROJAN Tinba Server Response rev 1 2014-09-12
snort ET POLICY request for hide-my-ip.com autoupdate rev 4 2014-09-12
snort ET TROJAN Hiloti loader requesting payload URL rev 2 2014-09-12
snort ET TROJAN Bredolab CnC URL Detected rev 3 2014-09-12
snort ET POLICY HTTP Request to a *.cz.cc domain rev 5 2014-09-12
snort ET TROJAN Ponmocup C2 Sending Data to Controller 2 rev 3 2014-09-12
snort ET TROJAN Trojan.BackDoor-DRV.gen.c Reporting-1 rev 3 2014-09-12
snort ET TROJAN Cnzz.cn Related Dropper Checkin rev 4 2014-09-12
snort ET POLICY HTTP Request to a *.qc.cx domain rev 2 2014-09-12
snort ET TROJAN Suspicious Download Setup_ exe rev 4 2014-09-12
snort ET POLICY HTTP Request to a *.gv.vg domain rev 4 2014-09-12
snort ET POLICY HTTP Request to a *.co.cc domain rev 5 2014-09-12
snort ET TROJAN Potential FakePAV Checkin rev 4 2014-09-12
snort ET TROJAN Possible JKDDOS download cl.exe rev 2 2014-09-12
snort ET TROJAN Ponmocup C2 Sending Data to Controller 1 rev 6 2014-09-12
snort ET DOS LOIC Javascript DDoS Outbound rev 4 2014-09-12
snort ET POLICY HTTP Request to a *.ce.ms domain rev 4 2014-09-12
snort ET TROJAN DecebalPOS User-Agent rev 1 2014-09-11
snort ET TROJAN Dumador Reporting User Activity rev 6 2014-09-11
snort ET SCAN Potential SSH Scan rev 19 2014-09-10