Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN LDPinch SMTP Password Report with mail client The Bat! rev 6 2014-08-21
snort ET SCAN Skipfish Web Application Scan Detected rev 5 2014-08-21
snort ET TROJAN Hoic.zip retrieval rev 2 2014-08-21
snort ET WEB_CLIENT DRIVEBY Social Engineering Toolkit JAR Download rev 1 2014-08-20
snort ET WEB_CLIENT DRIVEBY Social Engineering Toolkit JAR filename detected rev 1 2014-08-20
snort ET TROJAN Python.Ragua Checkin rev 1 2014-08-20
snort ET TROJAN ZeroLocker Downloading Config rev 1 2014-08-19
snort ET TROJAN ShellBot.C retrieval rev 1 2014-08-19
snort ET TROJAN Suspicious X-mailer Synapse rev 1 2014-08-14
snort ET TROJAN Smart Fortress FakeAV/Kryptik.ABNC Checkin rev 3 2014-08-13
snort ET TROJAN OneLouder Common URI Struct rev 1 2014-08-13
snort ET TROJAN Possible WEBC2-GREENCAT Response - Embedded CnC APT1 Related rev 3 2014-08-13
snort ET TROJAN Lurk Click fraud Template Request rev 1 2014-08-12
snort ET TROJAN PRISM Backdoor rev 3 2014-08-12
snort ET POLICY possible Xiaomi phone data leakage HTTP rev 1 2014-08-11
snort ET CURRENT_EVENTS Nuclear Exploit Kit exe.exe Payload rev 1 2014-08-08
snort ET TROJAN Win32/Nitol.A Checkin rev 6 2014-08-05
snort ET TROJAN Win32/Zemot Checkin rev 4 2014-08-05
snort ET TROJAN Ddex Loader Check-in rev 1 2014-08-05
snort ET TROJAN Kronos Checkin rev 1 2014-08-04
snort ET TROJAN Infostealer.Mysayad Checkin 2 rev 1 2014-08-04
snort ET TROJAN Infostealer.Mysayad Checkin 1 rev 1 2014-08-04
snort ET TROJAN Troj/ReRol.A Checkin 1 rev 3 2014-08-04
snort ET TROJAN Troj/ReRol.A Checkin 2 rev 2 2014-08-04
snort ET TROJAN DoS.Linux/Elknot.G Checkin rev 1 2014-07-30
snort ET SCAN Chroot-apache0day Unknown Web Scanner User Agent rev 3 2014-07-29
snort ET MOBILE_MALWARE Worm.AndroidOS.Selfmite.a Checkin rev 1 2014-07-28
snort ET SCAN Internet Scanning Project HTTP scan rev 1 2014-07-25
snort ET TROJAN W32/Kbot.Backdoor Variant CnC Beacon rev 2 2014-07-25
snort ET TROJAN Likely Malicious SSL Cert With Script Tags rev 1 2014-07-24
snort ET TROJAN XPSecurityCenter FakeAV Checkin rev 3 2014-07-24
snort ET TROJAN Hupigon.DF Checkin rev 2 2014-07-24
snort ET TROJAN Dridex/Bugat/Feodo Cookie rev 1 2014-07-24
snort ET SCAN Possible WordPress xmlrpc.php wp.getUsersBlogs Flowbit Set rev 2 2014-07-23
snort ET CURRENT_EVENTS Possible Sweet Orange redirection 21 July 2014 rev 1 2014-07-22
snort ET TROJAN Asterope Checkin rev 2 2014-07-22
snort ET WEB_SERVER Adobe Flash Player Rosetta Flash compressed CWS in URI rev 1 2014-07-18
snort ET TROJAN Soraya Credit Card Exfiltration rev 1 2014-07-16
snort ET TROJAN Upatre Common URI Struct July 15 2014 rev 2 2014-07-15
snort ET TROJAN Minirem rev 4 2014-07-11