Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN W32/Zeus.BitcoinMiner Variant CnC Beacon rev 1 2014-05-28
snort ET CURRENT_EVENTS Metasploit Various Java Exploit Common Class name rev 5 2014-05-27
snort ET TROJAN Win32/Urausy.C response rev 2 2014-05-23
snort ET SCAN NMAP OS Detection Probe rev 3 2014-05-21
snort ET TROJAN Possible Zendran ELF IRCBot Joining Channel rev 2 2014-05-19
snort ET TROJAN W32/Hicrazyk.A Downloader Install CnC Beacon rev 4 2014-05-17
snort ET TROJAN W32/HelloBridge.Backdoor Register CnC Beacon rev 1 2014-05-14
snort ET TROJAN W32/HelloBridge.Backdoor Login CnC Beacon rev 1 2014-05-14
snort ET CURRENT_EVENTS DRIVEBY FlashPack Plugin-Detect May 13 2014 rev 1 2014-05-14
snort ET TROJAN PandoraRat/Refroso.bsp Directory Listing Sent To Server rev 4 2014-05-13
snort ET TROJAN PandoraRat/Refroso.bsp Activity rev 4 2014-05-13
snort ET TROJAN W32/Asprox Passgrub POST CnC Beacon rev 2 2014-05-06
snort ET TROJAN W32/Karagany.Downloader CnC Beacon rev 1 2014-05-05
snort ET WEB_CLIENT Microsoft Application Crash Report Indicates Potential VGX Memory Corruption 2 rev 1 2014-04-30
snort ET WEB_CLIENT Microsoft Application Crash Report Indicates Potential VGX Memory Corruption rev 1 2014-04-30
snort ET TROJAN Trojan.Win32.A.FakeAV Reporting rev 4 2014-04-29
snort ET TROJAN Vawtrak/NeverQuest - Post Data Form 01 rev 1 2014-04-28
snort ET CURRENT_EVENTS SUSPICIOUS Crystalize Filter in Uncompressed Flash rev 1 2014-04-28
snort ET TROJAN Win32/Cutwail.BE Checkin 1 rev 3 2014-04-28
snort ET TROJAN Win32/Cutwail.BE Checkin 2 rev 3 2014-04-28
snort ET TROJAN Trojan-Spy.Win32.Zbot.qgxi Checkin rev 6 2014-04-28
snort ET TROJAN W32/Eclipse.DDOSBot CnC Beacon Response rev 1 2014-04-28
snort ET TROJAN Backdoor.Win32.RShot Ping Outbound rev 3 2014-04-28
snort ET TROJAN ftpchk3.php upload attempted rev 2 2014-04-24
snort ET CURRENT_EVENTS Fiesta SilverLight Exploit Download rev 1 2014-04-23
snort ET CURRENT_EVENTS Fiesta Flash Exploit Download rev 1 2014-04-23
snort ET TROJAN General Trojan Downloader rev 6 2014-04-22
snort ET POLICY Possible Grams DarkMarket Search DNS Domain Lookup rev 3 2014-04-22
snort ET TROJAN Backdoor Lanfiltrator Checkin rev 5 2014-04-22
snort ET TROJAN Virut Family GET rev 6 2014-04-21
snort ET WEB_CLIENT Oracle Java 6 Object Tag launchjnlp docbase Parameters Buffer Overflow rev 5 2014-04-21
snort ET TROJAN CryptoDefense DNS Domain Lookup rev 3 2014-04-17
snort ET TROJAN PlugX Checkin rev 5 2014-04-16
snort ET TROJAN W32/Trojan-Gypikon Server Check-in Response rev 3 2014-04-14
snort ET TROJAN User-Agent in Referer Field - Likely Malware rev 7 2014-04-14
snort ET TROJAN Suspicious HTTP Referer C Drive Path rev 2 2014-04-14
snort ET MOBILE_MALWARE Android.KorBanker Successful Fake Banking App Install CnC Server Acknowledgement rev 2 2014-04-14
snort ET WEB_SERVER Possible Successful Juniper NetScreen ScreenOS Firmware Version Disclosure Attempt rev 4 2014-04-14
snort ET TROJAN W32/SpeedingUpMyPC.Rootkit Successful Install GET Type CnC Beacon rev 3 2014-04-14
snort GPL FTP authorized_keys file transferred rev 5 2014-04-14