Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET TROJAN BlackTech ELF/TSCookie CnC Observed in DNS Query rev 2 2020-03-03
snort ET TROJAN BlackTech ELF/TSCookie CnC Observed in DNS Query rev 2 2020-03-03
snort ET TROJAN Observed GoBotKR Domain in TLS SNI rev 2 2020-03-03
snort ET TROJAN MalDoc Retrieving Possible Ostap Payload rev 2 2020-03-02
snort ET INFO Bit.do Shortened Link Request to EXE rev 2 2020-02-28
snort ET TROJAN Baraka Ransomware CnC activity email SMTP rev 2 2020-02-28
snort ET TROJAN Win32/Qbot/Quakbot Downloader - Requesting Secondary Download rev 2 2020-02-28
suricata ET MALWARE Win32/Qbot/Quakbot Downloader - Requesting Secondary Download rev 2 2020-02-28
suricata ET MALWARE Baraka Ransomware CnC activity email SMTP rev 2 2020-02-28
snort ET TROJAN Observed Ursnif Domain in TLS SNI rev 2 2020-02-27
snort ET TROJAN Observed Ursnif Domain in TLS SNI rev 2 2020-02-27
snort ET MALWARE Win32/Adware.YoutubeDownloaderGuru.A Variant CnC Activity rev 2 2020-02-27
snort ET MALWARE Win32/YTDDownloader.F Variant CnC Activity rev 2 2020-02-27
suricata ET ADWARE_PUP Win32/YTDDownloader.F Variant CnC Activity rev 1 2020-02-27
snort ET CURRENT_EVENTS Successful Microsoft Office Phish 2020-02-26 rev 2 2020-02-26
snort ET TROJAN JS/Ostap Maldoc Check-in rev 2 2020-02-26
snort ET POLICY EXE Base64 Encoded potential malware rev 2 2020-02-26
snort ET TROJAN Win32/CollectorStealer - Returning Client GeoIP Information rev 2 2020-02-26
snort ET TROJAN Win32/CollectorStealer - Uploading System Information rev 2 2020-02-26
snort ET TROJAN Observed Adwind RAT CnC DNS Query rev 2 2020-02-25
snort ET MALWARE Win32/Adware.Bang5mai.BB CnC Activity M3 rev 2 2020-02-25
snort ET CURRENT_EVENTS Successful Generic Credit Card Information Phish 2020-02-25 rev 2 2020-02-25
snort ET TROJAN Observed Adwind RAT CnC DNS Query rev 2 2020-02-25
snort ET TROJAN Observed Adwind RAT CnC DNS Query rev 2 2020-02-25
suricata ET PHISHING Successful Generic Credit Card Information Phish 2020-02-25 rev 2 2020-02-25
suricata ET ADWARE_PUP Win32/Adware.Bang5mai.BB CnC Activity M3 rev 2 2020-02-25
snort ET TROJAN ObliqueRAT CnC Checkin rev 1 2020-02-24
snort ET TROJAN ObliqueRAT CnC Heartbeat Packet rev 1 2020-02-24
suricata ET MALWARE ObliqueRAT CnC Heartbeat Packet rev 1 2020-02-24
suricata ET MALWARE ObliqueRAT CnC Checkin rev 1 2020-02-24
snort ET CURRENT_EVENTS Successful Generic Credit Card Information Phish 2020-02-21 rev 2 2020-02-21
snort ET CURRENT_EVENTS Successful Generic Credit Card Information Phish 2020-02-21 rev 2 2020-02-21
snort ET CURRENT_EVENTS Successful Generic Credit Card Information Phish 2020-02-21 rev 2 2020-02-21
snort ET CURRENT_EVENTS Successful Generic Credit Card Information Phish 2020-02-21 rev 2 2020-02-21
snort ET CURRENT_EVENTS Successful Generic Credit Card Information Phish 2020-02-21 rev 2 2020-02-21
snort ET CURRENT_EVENTS Successful Generic Credit Card Information Phish 2020-02-21 rev 2 2020-02-21
snort ET TROJAN Unk.VBSLoader Retrieving Payload rev 2 2020-02-21
suricata ET PHISHING Successful Generic Credit Card Information Phish 2020-02-21 rev 2 2020-02-21
suricata ET PHISHING Successful Generic Credit Card Information Phish 2020-02-21 rev 2 2020-02-21
suricata ET PHISHING Successful Generic Credit Card Information Phish 2020-02-21 rev 2 2020-02-21