Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET PHISHING Successful Generic Credit Card Information Phish 2020-02-21 rev 2 2020-02-21
suricata ET PHISHING Successful Generic Credit Card Information Phish 2020-02-21 rev 2 2020-02-21
suricata ET PHISHING Successful Generic Credit Card Information Phish 2020-02-21 rev 2 2020-02-21
snort ET TROJAN Observed PHPs Labyrinth Stage2 CnC Domain in TLS SNI rev 2 2020-02-20
snort ET TROJAN Fake ProtonVPN/AZORult CnC Domain Query rev 2 2020-02-20
snort ET TROJAN Observed PHPs Labyrinth Stage2 CnC Domain in TLS SNI rev 2 2020-02-20
snort ET MALWARE Webhancer Data Post rev 17 2020-02-20
snort ET TROJAN Observed PHPs Labyrinth Stage2 CnC Domain in TLS SNI rev 2 2020-02-20
snort ET TROJAN Observed PHPs Labyrinth Stage2 CnC Domain in TLS SNI rev 2 2020-02-20
snort ET TROJAN Observed PHPs Labyrinth Stage2 CnC Domain in TLS SNI rev 2 2020-02-20
snort ET TROJAN Observed PHPs Labyrinth Stage2 CnC Domain in TLS SNI rev 2 2020-02-20
snort ET MALWARE SurfSidekick Download rev 8 2020-02-20
snort ET TROJAN Observed PHPs Labyrinth Stage2 CnC Domain in TLS SNI rev 2 2020-02-20
snort ET TROJAN Observed PHPs Labyrinth Stage2 CnC Domain in TLS SNI rev 2 2020-02-20
snort ET TROJAN Observed PHPs Labyrinth Stage2 CnC Domain in TLS SNI rev 2 2020-02-20
snort ET TROJAN Observed PHPs Labyrinth Stage2 CnC Domain in TLS SNI rev 2 2020-02-20
snort ET TROJAN Observed PHPs Labyrinth Stage2 CnC Domain in TLS SNI rev 2 2020-02-20
snort ET WEB_SPECIFIC_APPS PHPNuke general SQL injection attempt rev 11 2020-02-20
snort ET TROJAN Observed PHPs Labyrinth Stage2 CnC Domain in TLS SNI rev 2 2020-02-20
snort ET TROJAN PHPs Labyrinth Backdoor Stage2 CnC Activity M2 rev 2 2020-02-19
snort ET TROJAN Spark Backdoor CnC Domain Query rev 2 2020-02-19
snort ET TROJAN Possible Charming Kitten Backdoor Checkin rev 2 2020-02-19
snort ET TROJAN PHPs Labyrinth Backdoor Stage1 CnC Activity rev 2 2020-02-19
snort ET TROJAN Possible Charming Kitten Backdoor CnC Activity rev 2 2020-02-19
snort ET TROJAN PHPs Labyrinth Backdoor Stage2 CnC Activity M1 rev 2 2020-02-19
snort ET CURRENT_EVENTS Possible Glitch.me Phishing Domain rev 2 2020-02-19
snort ET TROJAN Suspected Gamaredon Downloader Activity rev 2 2020-02-19
suricata ET MALWARE Possible Charming Kitten Backdoor CnC Activity rev 1 2020-02-19
suricata ET MALWARE Possible Charming Kitten Backdoor Checkin rev 2 2020-02-19
suricata ET MALWARE PHPs Labyrinth Backdoor Stage2 CnC Activity M1 rev 2 2020-02-19
snort ET TROJAN Possible NK APT SLICKSHOES Host Checkin rev 2 2020-02-18
suricata ET MALWARE Possible NK APT SLICKSHOES Host Checkin rev 1 2020-02-18
snort ET TROJAN Win32/Sarwent Variant CnC Activity rev 2 2020-02-17
snort ET TROJAN Win32/Sarwent Initial Checkin rev 2 2020-02-17
snort ET TROJAN Parallax CnC Response Activity M7 rev 1 2020-02-14
snort ET TROJAN Parallax RAT CnC Domain Observed in DNS Query rev 2 2020-02-14
suricata ET MALWARE X2000M.Agent Checkin Jan 24 2017 rev 3 2020-02-14
snort ET TROJAN POWERTON CnC Domain in DNS Lookup rev 2 2020-02-13
snort ET INFO Suspicious EXE requested with Java UA rev 2 2020-02-12
snort ET POLICY ABBCCoin Checkin rev 2 2020-02-12