Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN carberp check in rev 3 2012-03-17
snort ET ACTIVEX EdrawSoft Office Viewer Component ActiveX FtpUploadFile Stack Buffer Overflow rev 2 2012-03-17
snort ET ACTIVEX EdrawSoft Office Viewer Component ActiveX FtpUploadFile Format String Function Call Attempt rev 2 2012-03-17
snort ET WEB_SPECIFIC_APPS Joomla com_fundhelp controller Local File Inclusion Attempt rev 2 2012-03-17
snort ET TROJAN Storm/Waledac 3.0 Checkin 2 rev 6 2012-03-17
snort ET TROJAN MUROFET/Licat Trojan rev 8 2012-03-17
snort ET TROJAN Generic Downloader - HTTP POST rev 6 2012-03-16
snort ET TROJAN Generic Win32.Autorun HTTP Post rev 6 2012-03-16
snort ET TROJAN Urlzone/Bebloh Trojan Check-in rev 6 2012-03-16
snort ET TROJAN Fasec/FakeAV Alert/Keylogger/Dropper/DNSChanger Possible Rootkit - HTTP GET rev 6 2012-03-16
snort ET TROJAN Common Trojan HTTP GET Logging rev 5 2012-03-16
snort ET TROJAN Generic Downloader Checkin - HTTP GET rev 6 2012-03-16
snort ET TROJAN Banker/Banbra Related HTTP Post-infection Checkin rev 5 2012-03-16
snort ET TROJAN Fake AV GET rev 7 2012-03-16
snort ET TROJAN Donkeyp2p Update Detected rev 5 2012-03-16
snort ET TROJAN Win32 Dialer Variant rev 7 2012-03-16
snort ET TROJAN Conficker/KernelBot/MS08-067 related Trojan Checkin rev 10 2012-03-16
snort ET TROJAN Atya Dropper Possible Rootkit - HTTP GET rev 5 2012-03-16
snort ET TROJAN Asprox Form Submission to C&C rev 6 2012-03-16
snort ET TROJAN Rouge Security Software Win32.BHO.egw rev 5 2012-03-16
snort ET TROJAN Bravix Checkin rev 5 2012-03-16
snort ET TROJAN Banker/Banbra Variant POST via x-www-form-urlencoded rev 7 2012-03-16
snort ET TROJAN Common Downloader Install Report URL rev 6 2012-03-16
snort ET TROJAN Banker PWS/Infostealer HTTP GET Checkin rev 8 2012-03-16
snort ET TROJAN BlackEnergy v2.x Plugin Download Request rev 5 2012-03-16
snort ET TROJAN Downloader General Bot Checking In - Possible Win32.Small.htz related rev 6 2012-03-16
snort ET TROJAN Dosenjo/Kvadr Proxy Trojan Activity rev 4 2012-03-16
snort ET TROJAN TSPY_BANKER.IDV/Infostealer.Bancos Module Download rev 6 2012-03-16
snort ET TROJAN Asprox Data Post to C&C rev 5 2012-03-16
snort ET TROJAN Screenblaze SCR Related Backdoor - GET rev 6 2012-03-16
snort ET TROJAN Likely Fake Antivirus Download InternetAntivirusPro.exe rev 7 2012-03-15
snort ET WEB_CLIENT Likely Malicious PDF Containing StrReverse rev 10 2012-03-14
snort GPL WEB_SERVER .htaccess access rev 7 2012-03-13
snort GPL WEB_SERVER /~root access rev 9 2012-03-13
snort ET ATTACK_RESPONSE Backdoor reDuh http initiate rev 6 2012-03-13
snort GPL WEB_SERVER Tomcat server snoop access rev 12 2012-03-13
snort ET WEB_SERVER /bin/tsh In URI Possible Shell Command Execution Attempt rev 8 2012-03-13
snort ET ATTACK_RESPONSE Backdoor reDuh http tunnel rev 6 2012-03-13
snort ET WEB_SERVER /bin/csh In URI Possible Shell Command Execution Attempt rev 6 2012-03-13
snort ET TROJAN W32/Lici Initial Checkin rev 3 2012-03-13